Users

users@lists.roundcube.net

2 participants
2900 discussions

Problem with session_lifetime
by sws001 11 Nov '17

11 Nov '17

Hello, I have a problem with the Roundcube 1.2.3 under Debian 9. In my config I set: $config['log_session'] = true; and $config['session_lifetime'] = 20; Unfortunately that doesn't work. Roundcube don't close session at all. This big problem for me. Except for this feature everything works fine. Very thanks for all suggestions. Mrok

2 3

after upgrade; still can't index contacts
by Fabian A. Santiago 09 Nov '17

09 Nov '17

once again, after up'ing from 1.3.1 to 1.3.2, i still receive: ERROR: SQLSTATE[HY000] [1045] Access denied for user 'roundcube'@'localhost' (using password: NO)Error 500: Error connecting to database: SQLSTATE[HY000] [1045] Access denied for user 'roundcube'@'localhost' (using password: NO) after trying to run indexcontacts script from cli: from within the downloaded package folder: ./bin/indexcontacts.sh (while logged in as root / or with sudo) this always happens on each upgrade attempt and still can't make heads or tails of it. anyone have any ideas or has this been mentioned and i'm simply forgetting the fix / corrective action? Thanks everyone. btw: centos 7.4 mariadb 10.2.9 apache 2.4.6 -- -- Thanks, Fabian S. OpenPGP: 3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC

1 1

Security updates 1.3.3, 1.2.7 and 1.1.10 released
by Thomas Bruederli 08 Nov '17

08 Nov '17

Dear subscribers We just published updates to all stable versions from 1.1.x onwards delivering fixes for a recently discovered file disclosure vulnerability in Roundcube Webmail. Apparently this zero-day exploit is already being used by hackers to read Roundcube’s configuration files. It requires a valid username/password as the exploit only works with a valid session. More details will be published soon under CVE-2017-16651. The Roundcube series 1.0.x is not affected by this vulnerability but we nevertheless back-ported the fix in order to protect from yet unknown exploits. See the full changelog for the according version in the release notes on the Github download pages: https://github.com/roundcube/roundcubemail/releases/tag/1.3.3 https://github.com/roundcube/roundcubemail/releases/tag/1.2.7 https://github.com/roundcube/roundcubemail/releases/tag/1.1.10 https://github.com/roundcube/roundcubemail/releases/tag/1.0.12 We strongly recommend to update all productive installations of Roundcube with either one of these versions. In order to check whether your Roundcube installation has been compromised check the access logs for requests like ?_task=settings&_action=upload-display&_from=timezone As mentioned above, the file disclosure only works for authenticated users and by finding such requests in the logs you should also be able to identify the account used for this unauthorized access. For mitigation we recommend to change the all credentials to external services like database or LDAP address books and preferably also the 'des_key' option in your config. Kind regards Alec & Thomas

1 0

managesieve plugin
by mick crane 04 Nov '17

04 Nov '17

hello, I have roundcube dovecot installation for one user, me, on debian jessie. I try to use the managesieve plugin installed dovecot-sieve and dovecot-managesieved with apt and activated roundcube plugin. there is a file ~/sieve/managesieve.sieve which has rules in it and there are no complaints in the webpage of roundcube but messages are not moved to folders. Can somebody point me to a resource explaining what to put in dovecot configuration files to make it work ? cheers mick -- Key ID 4BFEBB31

2 7

Roundcube Webmail Update 1.3.2 released
by Thomas Bruederli 31 Oct '17

31 Oct '17

Dear subscribers We proudly announce the second service release to update the stable version 1.3. It contains fixes to several bugs reported by you, our dear community members as well as translation updates synchronized from Transifex. We also changed the wording for the setting that controls the time after which an opened message is marked as read. This was previously only affecting messages being viewed in the preview panel but now applies to all means of opening a message. That change came with 1.3.0 an apparently confused many users. Some translation work is still needed here. See the full changelog in the release notes [1] on our Github download page. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net/download. And as usual: please do backup your data before updating! Best, Alec & Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.2

1 0

Addressbook and QRCode issue in Roundcube ver 1.3.1
by Jorge 18 Oct '17

18 Oct '17

Hi, I have installed Roundcube version 1.3.1 and I have a problem when in addressbook I clicks on QR Code button. When I clicks on QR Code button, the QR Code image is not shown and in log file I have a lot of lines saying: PHP Warning: str_repeat(): Second argument has to be greater than or equal to 0 in (RC dir)\vendor\endroid\qrcode\src\QrCode.php on line 1230 Are there anybody that have same problem? It is posible to solve this problem? I ran RC under Windows with PHP 5.6.4 TIA. Jorge Colaccini --- El software de antivirus Avast ha analizado este correo electrónico en busca de virus. https://www.avast.com/antivirus

2 2

Issue with filters plugin
by absolutely_free＠libero.it 17 Oct '17

17 Oct '17

Hi, I am using RC 1.3.1 (I just upgraded from 1.1.9). After upgrade it seems plugin "filters" (2.1.6) is not working anymore. Every time I get error "field contains cannot be empty", even with a non-empty value, of course. Any suggestion? Thank you very much!

3 3

RC with Davical and calendar plugins from git.faster-it.com - any success?
by Ivars Strazdiņš 16 Oct '17

16 Oct '17

Hi, has anyone succeeded to setup RC with Davical and calendar plugins from these guys? https://git.faster-it.com/roundcube_calendar/about/ I have made two attempts, but calendar plugin throws error: [01-Jun-2017 15:44:21 +0300]: <lv2ds8jr> DAV Error: Not authenticated in /usr/share/roundcubemail/plugins/calendar/lib/SabreDAV/lib/OldSabre/DAV/Client.php on line 425 (GET /?_task=calendar) I have debugged that the plugin passes base64 encoded string '%p' instead of real user password to authentication backend. But why and how to fix that - I have no idea really. There is SabreDAV and OldSabre packed inside plugin which makes things even more interesting :/ Once, on my first attempt, I had managed to setup plugin so that it was able to write to CalDAV database, but not able to read (verified from other client). Now I cannot even repeat that with second installation. I get above error message on both GET and POST operations. I suspect it was a configuration thing so maybe that is all that's required to change. But I am not sure. It should be noted that their repository is not without problems, the fork claims a working configuration, but some functions (insert_default_calendar(), _expand_user()) were missing, I had to add them from original sources here: https://gitlab.awesome-it.de/kolab/roundcube-plugins/tree/feature_caldav Any insight appreciated. Thanks! Ivars

3 6

Re: [RCU] Reset RC settings to default
by absolutely_free＠libero.it 14 Oct '17

14 Oct '17

Hi, in your previous email (about deleting stuff from databases), did you mean: > delete from users where user username = 'someone(a)somedomain.com'; or only the "preferences" column's content? Because if I delete the entire row, I will delete user id too, and so it will be "inconsisent" with contacts table. Am I wrong? thankyou! > > Il 11 ottobre 2017 alle 20.27 Reindl Harald <h.reindl(a)thelounge.net> ha scritto: > > Am 11.10.2017 um 20:20 schrieb absolutely_free(a)libero.it: > > > > > > Hi, > > > > yes I did. But I don't know pretty much RC internals :) > > After next user's login, will his user_id be recreated? > > > > > > you are asking the question wrong! > > did you need to manually create it? > no > > did it got created at login? > since you did not create it manually - yes > > > > > > Thank you very much > > > > Il 11 ottobre 2017 alle 10.55 Reindl Harald <h.reindl(a)thelounge.net> > > ha scritto: > > > > Am 11.10.2017 um 10:50 schrieb absolutely_free(a)libero.it: > > > > is there a way to reset RC settings for some user? > > > > I am using RC 1.1.9 with MySQL backend > > > > did you even try to look at the database? > > just delete the database record for the user > > > > >

1 0

Reset RC settings to default
by absolutely_free＠libero.it 13 Oct '17

13 Oct '17

Hi, is there a way to reset RC settings for some user? I am using RC 1.1.9 with MySQL backend. Thank you

2 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users