PS: All mailboxes are functioning normally, SSL is configured properly, etc.. There are no mail issues.

Hi, folks.
Hoping someone can help me figure this one out.

One of our mail servers has an issue with RC webmail, following disaster recovery. There was never a problem with the webmail service before DR and nothing has been changed on the server since the previous DR backup was made, so there's no logical reason for things not to work, now.

The server is nginx and the configs I believe to be relevant are here:

/etc/nginx/sites-enabled/mail.domain.com.conf

server {
  server_name _;
  location ~ \.php$ {
  include snippets/fastcgi-php.conf;

  fastcgi_split_path_info ^(.+\.php)(/.+)$;
  fastcgi_pass unix:/run/php-fpm/php7.4-fpm.sock;
  include fastcgi_params;
}

default_type text/html;

include /etc/nginx/templates/iredadmin.tmpl;    # <- iRedAdmin
include /etc/nginx/templates/roundcube.tmpl;    # <- Roundcube webmail

 # certbot stuff...
}

/etc/nginx/sites-enabled/00-default-ssl.conf

server {
 listen 443 ssl http2;
 listen [::]:443 ssl http2;

 server_name _;
 index index.php;

 include /etc/nginx/templates/misc.tmpl;
 include /etc/nginx/templates/ssl.tmpl;
 include /etc/nginx/templates/iredadmin.tmpl;
 include /etc/nginx/templates/roundcube.tmpl;
 include /etc/nginx/templates/sogo.tmpl;
 include /etc/nginx/templates/netdata.tmpl;
 include /etc/nginx/templates/php-catchall.tmpl;
 include /etc/nginx/templates/stub_status.tmpl;
}

/etc/nginx/templates/roundcube.tmpl

location ~ ^/mail/(bin|config|installer|logs|SQL|temp|vendor)($|/.*) { deny all; }
location ~ ^/mail/(CHANGELOG|composer.json|INSTALL|jsdeps.json|LICENSE|README|UPGRADING)($|.*) { deny all; }
location ~ ^/mail/plugins/.*/config.inc.php.* { deny all; }
location ~ ^/mail/plugins/enigma/home($|/.*) { deny all; }

location = /mail {
 return 301 /mail/;
}

location ~ ^/mail/(.*\.php)$ {
 include /etc/nginx/templates/hsts.tmpl;
 include /etc/nginx/templates/fastcgi_php.tmpl;
 fastcgi_param SCRIPT_FILENAME /opt/www/roundcubemail/$1;
}

location ~ ^/mail/(.*) {
 alias /opt/www/roundcubemail/$1;
 index index.php;
}

Php7.4-fpm is running and the path to it is correct in the sites-enabled config files. Permissions are 660 on /var/run/php/php7.4-fpm.sock.

When I visit domain.com/iredadmin, I can sign in and everything works.
When I visit domain.com/mail, I get 502 Bad Gateway.

If there's any further information I can provide, please let me know.
Thank you!

The autologon plugin is an example of how the Roundcube plugin api allows auto login but will not work out of the box.

Roundcube needs the username and password to login so you need to design and build a way for your billing system to pass that to Roundcube and then build a custom plugin to get that data and login the user in.

Can you post how you have the password plugin configured?

I find the error message PHP Error: Password plugin: Hash method not supported in the log file of Roundcube. Is it about wrong configuration of Roundcube password plugin? How do I solve it?

Hi, I'm looking for a way for clients to be able to login from our billing system to the mail account.
Without the need of entering the login credentials again.
I've tried to use the autologon etc but without any luck.
Running the Roundcube 1.6.11.

I have enabled the password plugin for Roundcube. I want to change the password of Zimbra mailbox on Roundcube with LDAP. How should I configure?
 

Try kolabnow.com, it has Roundcube with calendar and DAV support, and some more.

Thanks for the update! I just checked and received the verification email successfully. The issue seems to be fixed now. Appreciate your quick action on this.

I fixed it. It was somehow a corrupt library in the system. Deleted php and all related to php and reinstalled and it worked fine. Not sure why that happened.

Quote from: SKaero on October 30, 2025, 11:31:40 AMThat wouldn't be a Roundcube issue, it would be a issue with the web server SSL configuration.

Quote from: SKaero on October 31, 2025, 12:48:00 AMChrome gives more details for SSL errors in the console but maybe Firefox doesn't, I don't have a site that has the issue to confirm.

I'm sure the issue isn't with Roundcube since Roundcube isn't responsible for the SSL encryption that is always handled by the web server.

If the error comes up only when viewing some HTML emails it most likely is due to something in the HTML in the email. Is there anyway you can send me the source of one of the emails that triggers the error?