Users

users@lists.roundcube.net

6 participants
2896 discussions

External AD/LDAP server address book
by Diogo Vieira 25 May '15

25 May '15

Hello, I'm trying to add an address book from an external LDAP server for one of our clients in our shared roundcube installation. From what I could tell roundcube supports this[0] but I would like to know if I can filter that address book only to appear to clients in a specific domain. Is this possible natively? In case it isn't, would it be necessary/possible to create a plugin for roundcube? [0]: at least it seems so as per the "Configuring Roundcube" section of http://trac.roundcube.net/wiki/Howto_Config/Ldap Thank you very much for your attention, -- Diogo Vieira <dfv(a)eurotux.com> Programador Eurotux Informática, S.A. | www.eurotux.com

1 0

Server Settings prefs
by list＠airstreamcomm.net 19 May '15

19 May '15

Running Roundcube 1.0.4 and we didn’t notice this for a very long time but the “Server Settings” preferences section is not visible on our install. We looked on line but could not find anything, is there some configuration option to expose this to users?

1 0

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:37, Reindl Harald wrote: > > read the wiki article > > CSRF is not about "verify authentication state", it is about a link > from the attacker leads in trigger a action in a web-application > *because you are authenticated* and hence there is a CRSF-token I wasn't sufficiently clear, I don't intend to scrape the data and embed it into another application. I plan to have the application redirect to RC itself, in the browser. The other application will never have access to the results of that page and it will not redirect back. Again, no different than you clicking on this link: http://www.amazon.com/s/?tag=duc0c-20&url=search-alias%3Daps&field-keywords… Your mail client will have no access to your Amazon account, but the search request will still be executed.

3 2

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:15, Reindl Harald wrote: > if that would work it would deserve a bugreport and a CVE because you > would bypass the > http://en.wikipedia.org/wiki/Cross-site_request_forgery protection I don't see why that would be the case. It's similar to entering https://www.google.com/?q=query+string into your browser's address bar. This wouldn't require any loss of security as RC can already verify authentication state before processing a request. For example, if you request this URL before logging in, you'll get a login page rather than the actual mailbox: https://roundcube/?_task=mail&_mbox=Archive is requested the same as if you were to request https://roundcube/?_task=mail&_mbox=Not%20Real It may not be possible with RC, but that's what I want to understand.

1 0

Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

I'm trying to develop an interface to roundcube and would like to pass it a search query for a specific folder. Does anyone know a proper way to do this over a HTTP GET request? I've tried these queries after viewing the headers during the AJAX search query (*string* is the URL encoded search query): https://roundcube/?_task=mail&_mbox=Archive&_action=search&_q=*string* https://roundcube/?_task=mail&_filter=ALL&_q=*string*&_mbox=Archive&_remote… Neither proved successful. Any throughts?

1 0

Signature positioning configuration
by Tristan Muzard 09 May '15

09 May '15

--- Original Language (French) --- Bonjour, Depuis hier les signatures ne se positionne plus à la suite en bas de message mais en lien avec la réponse, hors pour plein de raison nous somme nombreux à ne pas vouloir que les signatures soit en bas et les réponses au dessus des messages. Hors cette configuration n'est pas personnalisable. Je reste à votre dispo pour plus d'info. Cordialement. --- Auto-Translate : --- Hello, Since yesterday the signatures is positioned more as a result at the bottom of the message, but in connection with the answer, except for a lot of money because many of us do not want that signatures is down and the responses to the above messages. Excluding this configuration is not customizable. I remain at your avail for more info. Sincerely. -- Tristan

2 2

problem withSENDER and reply-to EMAILS.
by Rad Koi 07 May '15

07 May '15

Please, can anybody help me configure my email identity settings? My friend can receive emails to his webmail identy without filling in his REPLY-TO. For me I've tried asking him but he is selfish and would not like to tecah me. How do I receive messages to my webmail id if my SENDER EMAIL is added and no REPLY-TO?Thanks.

2 1

Join us at the Kolab Summit in The Hague
by Thomas Bruederli 01 May '15

01 May '15

Dear Roundcube users and affiliates The Roundcube development team gathers this weekend in The Hague at the first Kolab Summit. If you can make it there, we'd love to meet you in person and talk to you about the future of Roundcube. More information about the event and the location can be found here: https://conference.kolab.org Kind regards, Thomas

1 0

is it possible to disable use_secure_urls for some pages?
by martijn.list 30 Apr '15

30 Apr '15

Hi, Enabling use_secure_urls has some side effects which I'm looking at how to solve. For example, a user might have defined a bookmark to the RC login page (www.example.com/webmail/). This works find just as long as the user is not yet logged in. However if the user is already logged in and the user wants to check whether there is any new mail and therefore clicks the bookmark, an error page with "Access to this service was denied due to failing security checks!" is shown. The user should then click the "click here to try again" link which will redo the request but now with the correct token in the URL. Since the GET request is redone but now with the correct token added, to me it looks like checking the URL token for GET requests will not bring additional security because if the user clicks the "click here to try again" link, the request will be done anyway. Is it possible to disable the secure URL check for certain pages and/or requests? Perhaps with a plugin? or is it all or nothing? Kind regards, Martijn Brinkers

2 3

- Comparing roundcube vs OpenWebMail
by webmaster 29 Apr '15

29 Apr '15

I am examining the features and benefits of roundbox webmail. Since I have 7 years of mailboxes using OpenWebMail, another webmail, I have to take the decision if it is worth to migrate to roundcube now that I am contracting a different VPS with 1&1. First, if all my Sendmail mailserver OpenWebMail mailboxes contents Inbox, Sentmail, etc, can be read by roundcube or not. Second, compare the features of each one. OpenWebMail has tons of features, webdisk, multilanguage, customization, etc. and so does roundcube, so is there someone who knows OpenWebMail and can assist in comparing both? Much obliged !

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users