I have tested on my side, and the only thing is make sure that roundcube does not use the default auth with is set to null, I changed it to LOGIN, the new version is using the defaults.inc.php the older version is using the config.inc.php. (I am using 1.3.7 now). Other than that looks like the user I tested with can login, send mail etc. with no issues.. Now I wonder if we set a password does the clear password gets re-set and we need to redelete it again?
Remo -- > On Wednesday, Oct 03, 2018 at 19:02, Eric Broch <[email protected] > (mailto:[email protected])> wrote: > > Try the CLI commands I sent. There can be issues with the configuration of > squirrelmail and roundcube. > > > IMAP: > > > # openssl s_client -crlf -connect localhost:993 > > > imap> tag login [email protected] (mailto:[email protected]) $userpassword > > > > > > > > Submission: > > > # cd /usr/local/bin > # wget http://www.jetmore.org/john/code/swaks/latest/swaks > # chown root.root swaks > # chmod +x swaks > > # swaks --to [email protected] (mailto:[email protected]) > --from [email protected] (mailto:[email protected]) --server $yourqmthost --port > 587 --ehlo test -tls --auth login --auth-user [email protected] > (mailto:[email protected]) --auth-password $userpassword > > > On 10/3/2018 7:45 PM, Andrew Swartz wrote: > > Eric, On Centos7 QMT: I just created a new user account and set the > > password to '0123456789'. Then I used your SQL command to set > > pw_clear_passwd to null. Then I viewed the table to confirm it was empty > > (it was). Then I tried to log in to Squirrelmail using password > > '0123456789': Login failed. Then I used your SQL command to reset > > pw_clear_passwd back to '0123456789'. Then I tried to log in to > > Squirrelmail using password '0123456789': success. This seems different > > from your experience. This sucks because it seems to mean no easy fix for > > this problem. -Andy On 10/3/2018 4:24 PM, Eric Broch wrote: > > > I've been contacted by someone who removed the clear text password from > > > an account and had issued logging into Dovecot even after a restart. The > > > fix of course is to reset the password with /home/vpopmail/bin/vpasswd. > > > Does anyone else want to confirm/refute my findings that w/o the clear > > > text password Dovecot will work? > > > > > > > -- Eric Broch White Horse Technical Consulting (WHTC)
signature.asc
Description: PGP signature
