Users

users@lists.roundcube.net

15 participants
2943 discussions

Re: [RCU] How to know that a user is connected to Roundcube from a Rails app ?
by Sol Badguy 11 May '09

11 May '09

Sol Badguy wrote: >> Hello, >> >> I am making an SSO-like system based on the Roundcube connection and >> would like to check from a Ruby on Rails App that the user is logged in >> Roundcube. I have tried to make a HTTP GET request from my Rails app and >> checking for the existance of the login form on the index.php page. >> >> Here's my rails code >> >> require 'net/http' >> >> url = URI.parse('http://www.mysite.com/dir1/index.php') >> req = Net::HTTP::Get.new(url.path) >> res = Net::HTTP.start(url.host, url.port) {|http| >> http.request(req) >> } >> >> reg = /<div id="login-form">/ >> logged = reg.match(res.body) ? false : true >> >> even though a user is connected in Roundcube my get keep returning the >> login page. >> Where am I mistaken ? Or does anyone have a better way of doing this ? Michael Orlitzky wrote: > Two things are wrong. > First, if the user was logged in to Roundcube, it would be his or her > computer that was logged in, not your server. So, when your server > (Rails) requests the Roundcube page, it gets the login form. Because > your server *isn't* logged in to Roundcube -- the user's computer is. > Second, even if you were somehow performing this check on the user's > computer, it wouldn't work. There are security measures in place to > prevent it. If I'm logged in to Site A (Roundcube), and visit Site B > (Rails app), the two should not be able to find out anything about each > other. This is a Good Thing. > If you really think this is the right way to do single sign-on -- I > don't think it is, but I'm not willing to argue it right now-- then I > would suggest storing your PHP sessions in a SQL database. See for example, > http://us.php.net/session_set_save_handler > and the related functions. Also consider Googling around for "php sql > session" and similar. > If, > a) You store the Roundcube session in SQL > b) Your Rails application can access this SQL database and knows what to look for > then you might be able to determine whether or not a particular user is > logged in to Roundcube. Be careful with how you perform the checks, > though. You wouldn't want to assume that two users are the same person > simply because they have the same IP address Hello Michael, Thank you for your answer. I agree with you this is quite a rough way of doing SSO, it's my first try at it and any cleaner way of doing so would be welcome. I will follow your suggestion and make Roundcube store the session in my Rails' SQL Database and check if my user is connected without using the IP address. _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Attachment button is disabled
by Arthur Titeica 10 May '09

10 May '09

Hello! This is my first message to this list. First about my setup: My roundcube is accessible by two urls (mail.one.com and mail.two.com). However internally apache looks into the same directory (/var/www/roundcube) and as far as I see it there should be no difference regarding the features enabled or disabled. The problem is that everyone accessing mail.one.com has the "add attachment" button disabled. If, with the same IMAP user (arthur(a)one.com), I access roundcube thru the second URL (mail.two.com) everything is fine. I triple-checked permissions, I tried different browsers, different computers, I even restarted the server. Maybe this isn't strictly roundcube related but I hope anyone has an idea to get me going. Thanks. _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

How to know that a user is connected to Roundcube from a Rails app ?
by Sol Badguy 08 May '09

08 May '09

Hello, I am making an SSO-like system based on the Roundcube connection and would like to check from a Ruby on Rails App that the user is logged in Roundcube. I have tried to make a HTTP GET request from my Rails app and checking for the existance of the login form on the index.php page. Here's my rails code require 'net/http' url = URI.parse('http://www.mysite.com/dir1/index.php') req = Net::HTTP::Get.new(url.path) res = Net::HTTP.start(url.host, url.port) {|http| http.request(req) } reg = /<div id="login-form">/ logged = reg.match(res.body) ? false : true even though a user is connected in Roundcube my get keep returning the login page. Where am I mistaken ? Or does anyone have a better way of doing this ? Thank you for your help. _______________________________________________ List info: http://lists.roundcube.net/users/

2 1

Default Identity Issue: user@www.domain.com
by Jon 05 May '09

05 May '09

Hi All, I'm having an issue with an RC install on an ISPConfig system. When a new ISPConfig user is created, and that user logs into RC for the first time (auto-create is set to yes), that user's default identity in RC is user(a)www.domain.com. I don't mean that literally, the user and domain.com are replaced with the correct user and domain, but the 'www' appears. For those people who have their mail going to a different server than their web, this means that emails go out with incorrect from addresses set in them. It would be nice if everyone set their identities first, but they don't. I see a patch in the RC Trac from 2 years ago that forces new users to set their identities at first log in, but I'm hoping that something more intuitive or automatic has been introduced since then. I am very willing to accept that the reason RC is doing this is because of the way my Postfix is configured so if that is the case, please feel free to give me any information on what I may need to do there as well. Or at least tell me that's where the problem lies so I can go muck around with Postfix. Any help is appreciated. Thanks, Jon _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Re: [RCU] Login error
by Manuel Giorgini 05 May '09

05 May '09

[2009-05-05 12:11], A.L.E.C: >> I cannot modify postgres' configuration on the fly, because this is a >> production machine. How can I activate query debugging on RoundCube? > > $rcmail_config['sql_debug'] = true; Thank you. This is rather funny. This is what I do to reset the situation: === [ cut here ] ============================================= psql -U roundcube roundcubemail delete from session; delete from users; delete from identities; === [ cut here ] ============================================= Then I try logging in. If I do that with sql_debug = true, it works without any error, the first time and every other time after that. If I do that with sql_debug not set, it gives me the error I posted earlier on the first time; subsequently, it works. Another difference is that at every login, the table 'identities' stays empty when sql_debug is not set; but it does receive a new record (as I think it should), when sql_debug is set to true. I could be happy by just leaving sql_debug on the whole time, but I'm itchy at leaving SQL queries around, and it would end up occupying a lot of disk space. I would appreciate further assistance; if there is anything I can do just let me know. The error I receive on logs/errors is as follows: === [ cut here ] ============================================= [05-May-2009 12:31:59 +0200] DB Error: _doQuery: [Error message: Could not execute statement] [Last executed query: PREPARE mdb2_statement_pgsql_59831640a8cf52029e10ae35c84ad32bfd1b037f2 (text, text, text) AS INSERT INTO identities (user_id, del, standard, name, email) VALUES ($1, 0, 1, $2, $3)] [Native message: ERROR: column "user_id" is of type integer but expression is of type text HINT: You will need to rewrite or cast the expression.] === [ cut here ] ============================================= -- Cordialità / Best regards / Ĝis la / Parhain terveisin ------------------------------------------------------------------------ Manuel Giorgini <giorgini(a)interlogica.net>, Programmatore INTERLOGICA e-business solutions - http://www.interlogica.net Via Fusinato, 27 - IT 30171 Mestre VE - Italia - Unione Europea Tel +39 041 099 30 00 (6 linee r.a.) - Fax +39 041 099 30 49 ------------------------------------------------------------------------ --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/d4/cp3N3Zlz/giorgini.vcf Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

05 May '09

Hi all I just finished an installation of RC 0.2.1. I am using postgres 7.4.1 ; db install went smoothly, according to docs. I have this error on logs/errors when I connect for the first time: ==== [ cut here ] ====================================================== [05-May-2009 11:10:50 +0200] DB Error: _doQuery: [Error message: Could not execute statement] [Last executed query: PREPARE mdb2_statement_pgsql_5b0929dec7663e6f88ca030599ba8a998e3b74a83 (text, text, tex t) AS INSERT INTO identities (user_id, del, standard, name, email) VALUES ($1, 0, 1, $2, $3)] [Native message: ERROR: column "user_id" is of type integer but expression is of type text HINT: You will need to rewrite or cast the expression.] in [path]/program/include/rcube_mdb2.php on line 255 (POST [path]/?_task=&_action=login) ==== [ cut here ] ====================================================== Subsequent logins succeed. Maybe it's my fault but I am not sure of what went wrong. I would appreciate your help. Thanks. -- Cordialità / Best regards / Ĝis la / Parhain terveisin ------------------------------------------------------------------------ Manuel Giorgini <giorgini(a)interlogica.net>, Programmatore INTERLOGICA e-business solutions - http://www.interlogica.net Via Fusinato, 27 - IT 30171 Mestre VE - Italia - Unione Europea Tel +39 041 099 30 00 (6 linee r.a.) - Fax +39 041 099 30 49 ------------------------------------------------------------------------ --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/59/wHVsxdQ1/giorgini.vcf Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/users/

2 3

29 Apr '09

Hi all, I am providing the Roundcube login page with a valid username and password. After I click "login", I get returned to the same page, no error message. If I use the same username and an invalid password, I get the same page but a login failed error message. The only time I get a log message in logs/errors is when I use an invalid password. This is after performing a 'portupgrade roundcube' on freebsd. I am not sure what version I am on, but since I did a cvsup before I did the portupgrade, I am guessing it should be the most recent version available for freebsd. Thanks, Stuart Matthews _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

General Question about using Roundcube
by Matt Rossiter 29 Apr '09

29 Apr '09

Hello, I just have a general question. When I'm selecting random emails to delete or move to another folder I like to use the Ctrl key. However, every time I highlight an email using the Ctrl key it opens the emails up in a different window or Tab. I can still move the highlighted emails, but is there a way to select various different emails without it opening up new tabs? Thanks! Matt _______________________________________________ List info: http://lists.roundcube.net/users/

2 2

WARNING : Security hole in Roundcube !!! Anyone can enter your server !
by Denis BUCHER 27 Apr '09

27 Apr '09

Hello, If you are using roundcubemail-0.1.1, your server will be open to any pirat ! More details on how they are doing it : http://www.f-secure.com/vulnerabilities/en/SA33169 Denis Bucher -- Denis Bucher Horus Digital Solutions sàrl Each problem has a solution ___________________________________________________________________________ Tél. +41-22-8000625 Fax: +41-22-8000622 www.hsolutions.ch _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

performance optimisation of roundcube using compression and caching
by Daniel Black 26 Apr '09

26 Apr '09

I did a post on the dev list (links below) about getting greater performance using caching and compression. I thought folks here probably have some great experience in running websites and could suggest improvements or problems with the suggested configuration changes. If you do have suggestions/comments please share them to make roundcube better. http://lists.roundcube.net/mail-archive/dev/2009-04/0000102.html http://trac.roundcube.net/ticket/1485800 Daniel Black -- Email/List Administrator CAcert _______________________________________________ List info: http://lists.roundcube.net/users/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users