Users

users@lists.roundcube.net

4 participants
2921 discussions

Minimum SQL Privileges Required
by Matthew J Black 02 May '25

02 May '25

Hi All, I am enquiring as to the *minimum* privileges required by the RoundCube user to access the backend SQL (MariaDB) Server. Yes, I am aware that the Wiki says (on the Installation page) to use `GRANT ALL PRIVILEGES`, as do all of the On-Line Tutorials scattered across the Web. However, that is a *massive* security hole, especially if the backend server is *not* the same as the web server hosting RoundCube. Surely, for example, the RoundCube User does *not* need the ability to create other users or tables, drop the backend database, or grant privileges to other users. Thus, I am enquiring what *are* the *minimum* privileges required? I am going to assume - and please correct me if I am wrong - that the *required* privileges are: * DELETE, INSERT, SELECT, and UPDATE If this information is available on-line, could someone please point me in the correct direction - if not, could one of the devs and/or one of the experienced RoundCube users please let me know this information - thank you. Thanks in advance Cheers Dulux-Oz -- PEREGRINE I.T. Pty Ltd Signature ================================================== *Matthew J BLACK* M.Inf.Tech.(Data Comms) MBA B.Sc. MACS (Snr), CP, IP3P When you want it done /right/ – the first time! Phone: +61 4 0411 0089 Email: matthew(a)peregrineit.net <mailto:matthew@peregrineit.net> Web: www.peregrineit.net <http://www.peregrineit.net> View Matthew J BLACK’s profile on LinkedIn <https://au.linkedin.com/in/mjblack> This Email is intended only for the addressee. Its use is limited to that intended by the author at the time and it is not to be distributed without the author’s consent. You must not use or disclose the contents of this Email, or add the sender’s Email address to any database, list, or mailing list unless you are expressly authorised to do so. Unless otherwise stated, PEREGRINE I.T. Pty Ltd accepts no liability for the contents of this Email except where subsequently confirmed in writing. The opinions expressed in this Email are those of the author and do not necessarily represent the views of PEREGRINE I.T. Pty Ltd. This Email is confidential and may be subject to a claim of legal privilege. If you have received this Email in error, please notify the author and delete this message immediately.

3 3

Re: Minimum SQL Privileges Required
by Matthew J Black 02 May '25

02 May '25

That's a great idea (& one I was aware of - thanks) but that doesn't answer my question :-) Unless you are implying that my assumption was correct (ie DELETE, INSERT, SELECT, and UPDATE ). On 2/5/25 18:37, Reindl Harald (privat) wrote: > you can specifiy even two users to seperate read-only and writes > > $rcmail_config['db_dsnw'] = > 'mysqli://roundcube_rw:*****@127.0.0.1:3306/roundcube_db'; > $rcmail_config['db_dsnr'] = > 'mysqli://roundcube_ro:*****@127.0.0.1:3306/roundcube_db'; > > Am 02.05.25 um 10:00 schrieb Matthew J Black: >> Hi All, >> >> I am enquiring as to the *minimum* privileges required by the >> RoundCube user to access the backend SQL (MariaDB) Server. >> >> Yes, I am aware that the Wiki says (on the Installation page) to use >> `GRANT ALL PRIVILEGES`, as do all of the On-Line Tutorials scattered >> across the Web. However, that is a *massive* security hole, >> especially if the backend server is *not* the same as the web server >> hosting RoundCube. Surely, for example, the RoundCube User does *not* >> need the ability to create other users or tables, drop the backend >> database, or grant privileges to other users. >> >> Thus, I am enquiring what *are* the *minimum* privileges required? >> >> I am going to assume - and please correct me if I am wrong - that the >> *required* privileges are: >> >> * DELETE, INSERT, SELECT, and UPDATE >> >> If this information is available on-line, could someone please point >> me in the correct direction - if not, could one of the devs and/or >> one of the experienced RoundCube users please let me know this >> information - thank you. -- PEREGRINE I.T. Pty Ltd Signature ================================================== *Matthew J BLACK* M.Inf.Tech.(Data Comms) MBA B.Sc. MACS (Snr), CP, IP3P When you want it done /right/ – the first time! Phone: +61 4 0411 0089 Email: matthew(a)peregrineit.net <mailto:matthew@peregrineit.net> Web: www.peregrineit.net <http://www.peregrineit.net> View Matthew J BLACK’s profile on LinkedIn <https://au.linkedin.com/in/mjblack> This Email is intended only for the addressee. Its use is limited to that intended by the author at the time and it is not to be distributed without the author’s consent. You must not use or disclose the contents of this Email, or add the sender’s Email address to any database, list, or mailing list unless you are expressly authorised to do so. Unless otherwise stated, PEREGRINE I.T. Pty Ltd accepts no liability for the contents of this Email except where subsequently confirmed in writing. The opinions expressed in this Email are those of the author and do not necessarily represent the views of PEREGRINE I.T. Pty Ltd. This Email is confidential and may be subject to a claim of legal privilege. If you have received this Email in error, please notify the author and delete this message immediately.

1 0

Bouncing emails
by doreen.imagezone＠gmail.com 01 May '25

01 May '25

What can i do not to get bouncing emails on Gmail to the corporate email on round cube . If all SPF, DKIM & DMARC records have been corrected and validated. The server host has said i consult will the mail service provider whose round cube. How do i go about this?

3 2

Size of compose/reply pop up window
by Michael Heydekamp 30 Apr '25

30 Apr '25

Recently the default size of the compose/reply pop up window changed to an awkward size. I can manually adjust it but I can't figure out how to save it to the initial default size. I thought it was a Firefox issue at first but it appears to be isolated to this webmail. Any suggestions? Deleted cookies of the relevant domain, that didn't help. Roundube 1.6.6, Win10 Pro, FF 128.10.0esr (The text above was copied from a post in the Roundcube forum from Jan 2018, which received no response at all. See https://www.roundcubeforum.net/index.php?topic=24695.msg67347#msg67347) Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

1 0

SMTP Configuration
by White, Phil 20 Apr '25

20 Apr '25

Hi All Apologies for what must be a rather basic question -- but I've hit a brick wall in getting Roundcube working. Can anyone please help identify what is wrong? Going to the installer -- /installer/index.php?_step=3, everything appears configured correctly. Crucially, the 'Test SMTP config' and 'Test IMAP config' sections work without error. The test email sent is received at the intended destination. However, when logged in to an IMAP account, I am unable to send any email. The attempt gives the error: "SMTP Error (): Authentication failed." My SMTP server is on the same box as Roundcube. It accepts email submission via SMTP on ports 25, 465, and 587, although I could probably look at other methods (pipe, socket,...) For clients on the local network, no authentication is necessary, although I permit this if a client issues an AUTH command (because I use it for testing). For example, the following command works: swaks --server 192.168.123.254:465 --tls-on-connect --to whitepj(a)mydomain.co.uk --auth-user test_user --auth-password user_password --auth PLAIN My Roundcube configuration has been through several edits based on suggestions from the web. It is currently: $config['smtp_host'] = '192.168.123.254:25'; $config['smtp_auth_type'] = null; Roundcube version is 1.6.10 In Errors.log, I get the following: [20-Apr-2025 10:06:40 +0000]: <gln3hk80> PHP Error: SMTP server does not support authentication (POST /?_task=mail&_unlock=loading1745143624474&_framed=1&_action=send) [20-Apr-2025 10:06:40 +0000]: <gln3hk80> SMTP Error: Authentication failure: test message SIZE 8388608 8BITMIME DSN ETRN VRFY EXPN PIPELINING PIPECONNECT CHUNKING STARTTLS PRDR HELP (Code: 250) in /<...snip...>/htdocs/program/lib/Roundcube/rcube.php on line 1795 (POST /?_task=mail&_unlock=loading1745143624474&_framed=1&_action=send) Many thanks. Phil

2 3

limit e-mail adresses
by Jugendbewerb FF Kirchbach 10 Apr '25

10 Apr '25

Hallo, weiß jemand, ob es bei Roundcube eine Obergrenze für die Anzahl von Mailadressen beim Versenden von E-Mails gibt? does anyone know if Roundcube has an upper limit for number of e-mail addresses when sending e-mails? Danke Raimund

2 1

Please Help! :)
by bdm.global＠rbnapply.com 08 Apr '25

08 Apr '25

Hello, I need assistance/help. My mailbox is perpetually at capacity (currently at 96%), despite having deleted nearly all of my sent and received emails. Could you please help me with this issue? Thank you, Gordan.

4 3

Error600 with identities
by Matthias Schmidt 05 Apr '25

05 Apr '25

Hello, I changed database from an old mySQL to MariaDB10.5 on macOS I set up roundcube from scratch. Now in indentities I get an error 600 and the inbox is empty, so mails are not listed. I note a login on the server, nothing more. btw, the forum is not reachable for me. cheers and all the best Matthias

1 0

Support for Roundcube webmail on smartphone
by Charles-Henri Blanchard 28 Mar '25

28 Mar '25

Hello, Do you provide support for Roundcube webmail on smartphones ? Kind regards, Charles-Henri Blanchard Tél : +33604050054

2 1

debugging slow responsive web interface
by Marc 02 Mar '25

02 Mar '25

I have two roundcube web interfaces running on the same webserver. One of them has a slow responding UI, I already compared the config files. One is connected to a different mail server, but a regular imap client is just fast with that server. How should I go about debugging this?

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users