hMailServer 5.3.3 - Build 1879 Password Plugin

[dharmesh]

Dear Admin,

Good Morning

After installation and configuration of hmailserver 5.3.3 and also confgiure roundcubemail Stable: 0.8.1 I am able to login with the created domain users and password but when I enabled password plugin and configure config.inc.php with proper configuration of database and query for password I am able to change password successfully but when I login again with the change password imap login faild and I also double check in database that password is changed.

I am not know about that which algorithm is used by hmailserver 5.3.3
platform WINDOWS

Kindly help me for the same
I am waiting for your answer

[Yoni]

Is your webmail also hosted in a Windows Server?

[dharmesh]

yes

[Yoni]

Have you enabled DCOM in your box?

Either way, check your hMailServer installation under Performance tab Cache -> Accounts = 0 (zero) Time to live (seconds). That should make changes effective immediately. It looks like a cache issue we have already been made aware of.

[dharmesh]

still not able to login with new password ( we can change password but cant login with new password )

[Yoni]

Did you enable DCOM?

[dharmesh]

Dear Yoni,

as per myroundcube I installed and configure "plugin_manager" and it's  working.

Now I am able to login with new password.

SETUP = php-5.4.7 , mysql-5.5.27, hMailServer 5.3.3 - Build 1879, Roundcube Webmail 0.8.1

Thank you.

[Yoni]

Awesome! Glad you got is all up and running. I hope the information in our site (even when limited as we move forward with the project) gave you the basics you needed to have a fully functional plugin_manager. It isn't complicated at all once you understand the dynamic behind it.

Good luck with your project and thanks for letting me know that the info is actually usable. Feedback and constructive criticism is always highly appreciated.

[vmnetwork]

I have same problem

So my confing:
- Roundcube 0.8.2
- HmailServer 5.3.3
- PHP 5.3.18
- DCOM - done like instruction  http://myroundcube.com/myroundcube-plugins/hmail-client-plugin
- Windows Server 2008 R2
- IIS7

Hmailserver -> Advansed -> Perfomance -> Cache (Enabled)
Domain - 3600
Account - 3600
aLIAS - 3600
dISTRIBUTION LIST - 3600

Passwords are stored in the database MySQL, Roundcube works without problems, connection plug passed without problems. The problem actually lies in the change of the password itself. Password changes but after that it becomes impossible to go to Roundcube, reviewing database shows that changing it is not as it should. Apparently the problem with the configuration of the database query.

Code Select Expand



<?php

// Password Plugin options
// -----------------------
// A driver to use for password change. Default: "sql".
// See README file for list of supported driver names.
$rcmail_config['password_driver'] = 'sql';

// Determine whether current password is required to change password.
// Default: false.
$rcmail_config['password_confirm_current'] = true;

// Require the new password to be a certain length.
// set to blank to allow passwords of any length
$rcmail_config['password_minimum_length'] = 0;

// Require the new password to contain a letter and punctuation character
// Change to false to remove this check.
$rcmail_config['password_require_nonalpha'] = false;

// Enables logging of password changes into logs/password
$rcmail_config['password_log'] = false;

// Comma-separated list of login exceptions for which password change
// will be not available (no Password tab in Settings)
$rcmail_config['password_login_exceptions'] = null;


// SQL Driver options
// ------------------
// PEAR database DSN for performing the query. By default
// Roundcube DB settings are used.
$rcmail_config['password_db_dsn'] = 'mysql://user:password@localhost/post';

// The SQL query used to change the password.
// The query can contain the following macros that will be expanded as follows:
//      %p is replaced with the plaintext new password
//      %c is replaced with the crypt version of the new password, MD5 if available
//         otherwise DES.
//      %D is replaced with the dovecotpw-crypted version of the new password
//      %o is replaced with the password before the change
//      %n is replaced with the hashed version of the new password
//      %q is replaced with the hashed password before the change
//      %h is replaced with the imap host (from the session info)
//      %u is replaced with the username (from the session info)
//      %l is replaced with the local part of the username
//         (in case the username is an email address)
//      %d is replaced with the domain part of the username
//         (in case the username is an email address)
// Escaping of macros is handled by this module.
// Default: "SELECT update_passwd(%c, %u)"
$rcmail_config['password_query'] = 'UPDATE hm_accounts SET accountpassword=%n WHERE accountaddress=%u LIMIT 1';
$rcmail_config['password_crypt_hash'] = 'sha1';
// By default domains in variables are using unicode.
// Enable this option to use punycoded names
$rcmail_config['password_idn_ascii'] = false;

// Path for dovecotpw (if not in $PATH)
// $rcmail_config['password_dovecotpw'] = '/usr/local/sbin/dovecotpw';

// Dovecot method (dovecotpw -s 'method')
$rcmail_config['password_dovecotpw_method'] = 'CRAM-MD5';

// Enables use of password with crypt method prefix in %D, e.g. {MD5}$1$LUiMYWqx$fEkg/ggr/L6Mb2X7be4i1/
$rcmail_config['password_dovecotpw_with_method'] = false;

// Using a password hash for %n and %q variables.
// Determine which hashing algorithm should be used to generate
// the hashed new and current password for using them within the
// SQL query. Requires PHP's 'hash' extension.
$rcmail_config['password_hash_algorithm'] = 'sha1';

// You can also decide whether the hash should be provided
// as hex string or in base64 encoded format.
$rcmail_config['password_hash_base64'] = false;


may be problem on:

Code Select Expand


$rcmail_config['password_query'] = 'UPDATE hm_accounts SET accountpassword=%n WHERE accountaddress=%u LIMIT 1';

?

[rosali]

Don't use sql driver. Use hmail driver.

[vmnetwork]

Thanks, it really works