Roundcube Community Forum

 

Password Change witch Argon2

Started by Simonbaumbach, July 10, 2019, 10:19:45 AM

Previous topic - Next topic

Simonbaumbach

Dear Sirs and Madames,
For the use of Roundcube under Dovecot we would like to use Argon2 and give the users the opportunity to change their password. Is this possible?

I would be glad about a feedback.
OS: Ubuntu 18.04 LTS
Dovecot
Roundcube 1.3.9


Best regards from Germany
Simon Baumbach


JohnDoh

#1
The plugin does not support Argon2 atm. A quick search suggests that support needs to be compiled into PHP. But if you use the dovecotpw method for hasing your password then the plugin supports everything Dovecot does so may be give that a try.
Roundcube Plugins: Contextmenu, SpamAssassin Prefs, and more...

vention

Does the password plugin support ARGON2I now, after 7 years?
If not, how can i do argon2i on a separate standalone webmail server (without dovecot)?

SKaero

The password plugin supports (assuming support is complied in your install of PHP) you can set the $config['password_algorithm'] to either "hash-argon2i" or "hash-argon2id".

JohnDoh

I thank may be you are referring to this issue which was resolved with the release of 1.6 in 2022.



Roundcube Plugins: Contextmenu, SpamAssassin Prefs, and more...