#1  
Old 8th December 2008, 21:55
kalua kalua is offline
Member
 
Join Date: Oct 2008
Posts: 30
Thanks: 3
Thanked 0 Times in 0 Posts
Default email account creation

I'm missing an option that an email user can change his password. Or did I overlooked something?

Currently I (ISPConfig client) have to create some email accounts, but the problem that I have to set the password. I should not gain knowledge about the password.

What would be an easy way to give an email owner the ability to change (or set or recover) his password?
Would this be possible with an imap client?

I would love to give an alternative email address and ISPConfig sends an generated password to this address.
Reply With Quote
Sponsored Links
  #2  
Old 9th December 2008, 10:58
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,177
Thanks: 829
Thanked 5,414 Times in 4,257 Posts
Default

There is no mailuser interface implemented yet. But it might be that there are plugins e.g. for squirrelmail that can change passwords in a mysql database as well.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 16th December 2008, 11:17
kalua kalua is offline
Member
 
Join Date: Oct 2008
Posts: 30
Thanks: 3
Thanked 0 Times in 0 Posts
Default

I still found no satisfying solution to administer email accounts. It is possible with an very extended version of roundcube see [1] and [2] to let user change their passwords. But these version of Roundcube is not ready for production use, e.g. the generated emails have an bad header, so it got stuck in my spam filter.

Now I am at the crossroad with two paths:

1) Get ISPConfig to handle change requests for user email accounts
2) Get Roundcube (not MyRoundcube as in [1]) to handle these, e.g. write an plugin

(There are also plugins for squirrelmail but they depend on poppassd or require to modify DB-tables)

I would like to go path 1 because it seems to be the more appropriate way and is not depended by any third party software. But I think its also more difficult. So far the following points come to my mind:

a) a user can place somewhere an alternative email address
This included the possibility for an email user to login to ISPConfig. But maybe in the first step its enough that the "mailmaster" sets this address.

b) this address needs to be confirmed by the user, e.g. by following an link (with an id) send to him

c) if the user want to request a new password, an email with a new password is send to his alternate address. Alternative the email contains an link which as to be confirmed again, which prevents the user account from unauthorized password changes

My questions are:

Is this even wanted to be included in ISPConfig? Or are there other ideas to handle this topic?
Is there some code I could build on?
Is there somebody who can point me in the right direction to start?




[1] http://liebl.ath.cx/dl/RoundCube/
[2] http://www.roundcubeforum.net/myroun...ase-notes.html
Reply With Quote
  #4  
Old 16th December 2008, 15:06
archerjd archerjd is offline
Member
 
Join Date: Dec 2006
Posts: 66
Thanks: 6
Thanked 6 Times in 6 Posts
Default

Kalua, could this be close to what you are looking for?

http://www.roundcubeforum.net/plug-i...ual-users.html

Basically, you would set the password and then give them directions on how to change it.

Last edited by archerjd; 16th December 2008 at 15:09.
Reply With Quote
  #5  
Old 18th December 2008, 22:38
kalua kalua is offline
Member
 
Join Date: Oct 2008
Posts: 30
Thanks: 3
Thanked 0 Times in 0 Posts
Default

Thank you archerjd! Indeed I was browsing this forum the other day and was able to solve my problem. Its now possible to let the user change their password.

I'll post my modifications here later.
Reply With Quote
  #6  
Old 19th December 2008, 06:21
archerjd archerjd is offline
Member
 
Join Date: Dec 2006
Posts: 66
Thanks: 6
Thanked 6 Times in 6 Posts
Default

Awsome, always happy to help and thanks for the update.
I'd like to see how it turns out because I'll probably be doing the same to my installation.
Reply With Quote
  #7  
Old 19th December 2008, 10:57
kalua kalua is offline
Member
 
Join Date: Oct 2008
Posts: 30
Thanks: 3
Thanked 0 Times in 0 Posts
 
Default

I'm using roundcubemail-0.2-beta, not sure if there are incompatibilities with later versions of RC as I did not try this.

I was inspired by this posting and made some changes.

In the file password.inc you have to set your connection settings. I created an new user which is only allowed to SELECT and UPDATE the table mail_user and has only access to the field email and password:

Create a new user and grant him the follow rights:

Code:
GRANT SELECT (
`email` , `password`
),
UPDATE (
`password`
) ON `dbispconfig`.`mail_user` TO 'DBUSERNAME'@ 'localhost';
In file password.inc I modified the function rcmail_save_password
This checks if the current password matches the one saved in the DB. I saw in ISPConfig that there is a salt calculated for the crypt function. I wasn't sure about the impact if the salt would calculated an other way, so I simply use the same routine.

Find my patch attached.
Attached Files
File Type: gz rc_pwedit.patch.gz (3.3 KB, 228 views)
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
hotmail rejects outgoing email nzimas Server Operation 3 1st May 2009 03:39
please help to configure postfix to download mail from a catch all email account mmi1982 Server Operation 2 28th July 2008 05:02
Email account sorting and showing email counts friday Feature Requests 0 4th May 2008 16:13
got a problem with a email account paulley Server Operation 7 9th July 2006 13:11
Account creation email for customers and reseller lorello General 1 11th April 2006 14:15


All times are GMT +2. The time now is 22:19.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.