On 04/21/2011 10:36 AM, J4K wrote:
On 04/17/2011 08:45 PM, JKL wrote:
Dear all,
I just discovered the password plugin that comes by default withRC, and have enabled it. As I expected it did not work out of the box, (mysql driver) because I know that I have to adapt the plug-in to my particular configuration.
I have all passwords stored in a mysql backend that was configured using postfixadmin. Is it possible, and if so does any one have any pointers, to get RoundCube's password plug-in to work with the mysql backup as configured with the default postfixadmin mysql set-up?
Best regards, J.
Hi,
Follow up with more info:
I have a roundcube database in mysql. It contains a table of user acconts, but not the passwords (crededtials).
The credentials are in the mysql dB set up by postfixadmin. The postfixadmin dB has this table:
mysql> describe mailbox; +------------+--------------+------+-----+---------------------+-------+ | Field | Type | Null | Key | Default | Extra | +------------+--------------+------+-----+---------------------+-------+ | username | varchar(255) | NO | PRI | NULL | | | password | varchar(255) | NO | | NULL | | | name | varchar(255) | NO | | NULL | | | maildir | varchar(255) | NO | | NULL | | | quota | bigint(20) | NO | | 0 | | | local_part | varchar(255) | NO | | NULL | | | domain | varchar(255) | NO | MUL | NULL | | | created | datetime | NO | | 0000-00-00 00:00:00 | | | modified | datetime | NO | | 0000-00-00 00:00:00 | | | active | tinyint(1) | NO | | 1 | | +------------+--------------+------+-----+---------------------+-------+
The RoundCube installation has the roundcube dB configured in the config/db.inc.php.
However, for the password plugin to work, I imagine that it has to update a row in the other database that contains the actual credentials: (postfixadmin,mailbox.password).
The password plugin file : plugins/password/config.inc.php does not contain any method to interact with postfixadmin dB.
Could I add ths parameter into the plugins/password/config.inc.php to enable this? Would it work, well?
$rcmail_config['db_dsnw'] = 'mysql://roundcube:MyDbPassword@localhost/postfixadmin';
Regards.
easily solved: (easy is subjective)
In the plugins/password/config.inc.php:
Change this line from $rcmail_config['password_db_dsn'] = ''; to $rcmail_config['password_db_dsn'] = 'mysql://username:password@localhost/postfixadmin'; (Here my username and password are my roundcube users ones)
Change this line
from
$rcmail_config['password_query'] = 'SELECT update_passwd(%c, %u)';
to
$rcmail_config['password_query'] = "UPDATE mailbox SET password
= %c, modified=now() WHERE username = %u LIMIT 1";
Grant permissions for your roundcube user to the postfixadmin database. (One could also use the postfixadmin user instead, but I think its easier to keep these separated. It is better that roundcube creds are compromised instead of the postfixadmin credentials)
GRANT SELECT, UPDATE (password, modified)
ON postfixadmin.mailbox
TO 'roundcube'@'localhost'
IDENTIFIED BY 'password'
Note: Replace with your datavase names and user names accordingly.
Note that password is not the encrypted password one sees in the database, but the actual plain text password Not: *327384943$@$@#$@#%$@$@#$@#$ But this: MySecretPassword These are examples.