On 04/21/2011 10:36 AM, J4K wrote:

On 04/17/2011 08:45 PM, JKL wrote:

...

Dear all,

 I just discovered the password plugin that comes by default with

RC, and have enabled it. As I expected it did not work out of the box, (mysql driver) because I know that I have to adapt the plug-in to my particular configuration.

I have all passwords stored in a mysql backend that was configured using postfixadmin. Is it possible, and if so does any one have any pointers, to get RoundCube's password plug-in to work with the mysql backup as configured with the default postfixadmin mysql set-up?

Best regards, J.

Hi,

Follow up with more info:

I have a roundcube database in mysql. It contains a table of user acconts, but not the passwords (crededtials).

The credentials are in the mysql dB set up by postfixadmin. The postfixadmin dB has this table:

mysql> describe mailbox; +------------+--------------+------+-----+---------------------+-------+ | Field | Type | Null | Key | Default | Extra | +------------+--------------+------+-----+---------------------+-------+ | username | varchar(255) | NO | PRI | NULL | | | password | varchar(255) | NO | | NULL | | | name | varchar(255) | NO | | NULL | | | maildir | varchar(255) | NO | | NULL | | | quota | bigint(20) | NO | | 0 | | | local_part | varchar(255) | NO | | NULL | | | domain | varchar(255) | NO | MUL | NULL | | | created | datetime | NO | | 0000-00-00 00:00:00 | | | modified | datetime | NO | | 0000-00-00 00:00:00 | | | active | tinyint(1) | NO | | 1 | | +------------+--------------+------+-----+---------------------+-------+

The RoundCube installation has the roundcube dB configured in the config/db.inc.php.

However, for the password plugin to work, I imagine that it has to update a row in the other database that contains the actual credentials: (postfixadmin,mailbox.password).

The password plugin file : plugins/password/config.inc.php does not contain any method to interact with postfixadmin dB.

Could I add ths parameter into the plugins/password/config.inc.php to enable this? Would it work, well?

$rcmail_config['db_dsnw'] = 'mysql://roundcube:MyDbPassword@localhost/postfixadmin';

Regards.

easily solved: (easy is subjective)

In the plugins/password/config.inc.php:

Change this line from $rcmail_config['password_db_dsn'] = ''; to $rcmail_config['password_db_dsn'] = 'mysql://username:password@localhost/postfixadmin'; (Here my username and password are my roundcube users ones)

Change this line from $rcmail_config['password_query'] = 'SELECT update_passwd(%c, %u)'; to $rcmail_config['password_query'] = "UPDATE mailbox SET password = %c, modified=now() WHERE username = %u LIMIT 1";

Grant permissions for your roundcube user to the postfixadmin database. (One could also use the postfixadmin user instead, but I think its easier to keep these separated. It is better that roundcube creds are compromised instead of the postfixadmin credentials)

GRANT SELECT, UPDATE (password, modified)
ON postfixadmin.mailbox
TO 'roundcube'@'localhost'
IDENTIFIED BY 'password'

Note: Replace with your datavase names and user names accordingly.

Note that password is not the encrypted password one sees in the database, but the actual plain text password Not: *327384943$@$@#$@#%$@$@#$@#$ But this: MySecretPassword These are examples.