Users

users@lists.roundcube.net

2 participants
2900 discussions

Re: [RCU] update
by mick crane 30 Oct '18

30 Oct '18

On 2018-10-28 16:43, Reindl Harald wrote: > Am 28.10.18 um 17:34 schrieb mick crane: >> On 2018-10-28 15:58, Michael Orlitzky wrote: >>> On 10/28/2018 04:54 AM, mick crane wrote: >>>> find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} \; >>> >>> Chances are, you don't want your database credentials to be >>> world-readable. >> >> what then 640? > > surely, and not owned by the webserver, basic security principals > > normaly stuff should be owned by root and read-only for the webserver > group, folers 750, files 640 If I change all the permissions to 750 for the roundcubemail directories and 640 for the files and all the ownerships to root.root it don't work after restart apache ownerships www-data.www-data it works. probably it is particular files need to be different but I don't know which ones. [sigh] mick -- Key ID 4BFEBB31

2 2

Re: [RCU] update
by mick crane 28 Oct '18

28 Oct '18

On 2018-10-28 16:43, Reindl Harald wrote: > Am 28.10.18 um 17:34 schrieb mick crane: >> On 2018-10-28 15:58, Michael Orlitzky wrote: >>> On 10/28/2018 04:54 AM, mick crane wrote: >>>> find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} \; >>> >>> Chances are, you don't want your database credentials to be >>> world-readable. >> >> what then 640? > > surely, and not owned by the webserver, basic security principals > > normaly stuff should be owned by root and read-only for the webserver > group, folers 750, files 640 Ok I do that. This is not internet facing stuff but guess do it safely cheers mcik -- Key ID 4BFEBB31

1 0

update
by mick crane 28 Oct '18

28 Oct '18

excuse ignorance. using 1.3.5 with managesieve and enigma plugins. Is there a script that will update to 1.3.8 if I tell it where 1.3.5 is installed or do I need to go through everything from start ? mick -- Key ID 4BFEBB31

3 5

2FA Plugin working but then I can't log in to get to Settings!
by Philip Rhoades 27 Oct '18

27 Oct '18

People, I have had 2FA working in the past but now if the config line config.inc.php is commented out eg: // $config['plugins'] = array('twofactor_gauthenticator'); then I don't get any any 2FA stuff in my settings - but if uncomment the above line, I get logged out and when I try to log in, I am asked for the 2FA code - but I haven't been able to scan the QR code yet in settings for my authenticator app so I can produce the code! This seems like a Catch-22 situation - what am I missing? Thanks, PHil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

1 0

Roundcube Webmail 1.3.8 released
by Thomas Bruederli 27 Oct '18

27 Oct '18

Dear subscribers We proudly announce the next service release to update the stable version 1.3. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability plus updates to ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot and MySQL 8. See the full changelog in the release notes on the Github download page [1]. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net. Best, Alec & Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.8

2 1

Re: [RCU] can't login after upgrade
by Vincent Van Houtte 24 Oct '18

24 Oct '18

On 2018-10-08 18:15, Reindl Harald wrote: > Am 08.10.18 um 17:14 schrieb Vincent Van Houtte: >> These errors clearly say that the user 'arcgraph' does not exist, that >> RC wants to create the user by logging in (I don't believe this is >> default - an unknown user should just be rejected imho), and that the >> subsequent attempt to create that user fails. >> >> There is also the mention of a plugin that may interfere here. Can you >> disable all plugins for the sake of testing? > > bullshit > > Field 'alias' doesn't have a default value (SQL Query: INSERT INTO > `users` (`created`, `last_login`, `username`, `mail_host`, `language`) > VALUES (now(), now(), 'arcgraph', 'www.arcgraphics.ch', 'en_US') > > the table has a column 'alias' with no default value which is not > listed > in the insert - mysql basics Although your assessment is correct, it misses the overall picture. The question relates to an existing installation that was merely updated. There is no reason why RC would need to create (INSERT INTO 'users') a new user upon login. Even if my suggestion would be wrong, I don't see any reason to use such language, especially from someone dissing the lack of respect of other people. Kind regards, Vincent

3 3

blacklist
by Jim Pazarena 24 Oct '18

24 Oct '18

can roundcube maintain a blacklist of IP number connections independent from apache or the main firewall (wrappers) ?

1 0

Duplicated insert's for sessions in log's
by Jorge Bastos 17 Oct '18

17 Oct '18

Howdy, I've seen in the logs this info, and i'd like to know what triggers it. Would it be the same user logged in more than one place? (well the sessid should be different for sure) Was the user that closed the browser and opened it again in the same page? Another reason? To handle this what would be the best option, insert it using insert ignore or replace? Or should it be like this? Oct 17 18:33:36 fastweb roundcube: <i43tda9m> DB Error: [1062] Duplicate entry 'i43tda9m0k8a0dukdshmvoettq' for key 'PRIMARY' (SQL Query: INSERT INTO `session` (`sess_id`, `vars`, `ip`, `changed`) VALUES ('i43tda9m0k8a0dukdshmvoettq', 'dGVtcHxiOjE7bGFuZ3VhZ2V8czo1OiJwdF9QVCI7cmVxdWVzdF90b2tlbnxzOjMyOiJQYVZnYkx Za2dzQVJTbHlzN2VkT1VWTkJSN3lodFR2NiI7', '148.71.229.58', now())) in /home/hosting/dbbbbg.pt/webmail/program/lib/Roundcube/rcube_db.php on line 543 (GET /webmail/?_task=mail&_action=get&_mbox=INBOX&_uid=56841830&_token=d6qQ2Yvet5 ke0DMZEdqWzLZwVemCu2Y5&_part=5&_embed=1&_mimeclass=image)

1 0

unsubscribe
by jsmosc 08 Oct '18

08 Oct '18

unsubscribe

2 1

can't login after upgrade
by Meaulnes Legler ＠ roundcube 08 Oct '18

08 Oct '18

hello again I'm still having login problems on different sites on my webserver. On several sites, I upgraded from version 1.2.4 to 1.3.7 and since then, a login attempt says « _/*!*\_ Login failed ». Users at sites running RoundCube 1.2.4 have no problems. A.L.E.C. said, I should fix the database. How can I do this? I couldn't find any instructions online... Thank you and best regards _~_ '¿') `-´ Meaulnes Legler Zurich, Switzerland +41\0 44 260 16 60

5 9

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users