1

Topic: iRedAdmin-Pro-LDAP-2.2.0 has been released

== UPDATE / Jan 8, 2015 ==

We released new version v2.2.1 on Jan 8, it fixes several critical bugs in v2.2.0. Please follow "How to download the latest iRedAdmin-Pro" section to get the latest release, v2.2.1.

Fixed issues:

  • Not correctly save per-user wblist in self-service page.

  • Removes existing wblist after adding new ones.

  • Raise 'internal server error' if login username/password is wrong.

  • Cannot delete all quarantined mails.

  • Not handle msg 'WBLIST_UPDATED' in self-service page.

== ORIGINAL POST ==
Dear all,

iRedAdmin-Pro-LDAP-2.2.0 (a.k.a. iRedAdmin-Pro for OpenLDAP backend) is now available for your upgrading and purchasing.

How to download the latest iRedAdmin-Pro

All customers can get download link of this new release by following below steps if you have iRedAdmin-Pro-LDAP-1.7.0 or later releases installed:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If you're running older release, please mail to support @ iredmail.org to get download link of the latest release.

Highlight features in this release
  • Self-service. Normal user can login to manage their own profile (name, password), forwarding, per-user white/blacklist, quarantined mails, and check received mails.

  • Deeper Amavisd integration: global/per-domain/per-user whitelist and blacklist, spam policy.

  • Able to generate CRAM-MD5/SSHA512/BCRYPT password hashes, you can also generate two (different) password hashes for one user.

Full changes since iRedAdmin-Pro-LDAP-2.1.2:
    * New features:
        - Better Amavisd integration:

          o Able to set max size of single incoming email.
            Note: it requires iRedAPD plugin `amavisd_message_size_limit`.

          o Able to manage per-domain, per-user white/blacklists, and it's
            integrated with Amavisd.

              + Although this white/blacklists works with Amavisd after-queue,
                but you'd better enable iRedAPD plugin `amavisd_wblist` to
                reject blacklisted senders during smtp session to save system
                resource.

              + It replaces white/blacklists provided by Cluebringer, but
                Cluebringer wblist also works.

            o Able to set global, per-domain and per-user (basic) spam policy.

        - self-service. Normal user can login to manage their own profile
          (name, password), forwarding, per-user white/blacklist, quarantined
          mails, and check received mails.

          o Self-service is disabled by default. Please set below parameter
            in iRedAdmin config file 'settings.py' then reload/restart Apache
            web service or uwsgi service if you're running Nginx.

            ENABLE_SELF_SERVICE = True
          o Domain admin can restrict allowed self-service preferences in
            domain profile page, under tab 'Advanced'.

          o Server admin is able to set which self-service page should be
            displayed after user login. Sample setting in iRedAdmin config
            file:

              SELF_SERVICE_DEFAULT_PAGE = 'preferences'  # Default setting
              SELF_SERVICE_DEFAULT_PAGE = 'quarantined'  # Quarantined Mails
              SELF_SERVICE_DEFAULT_PAGE = 'received'     # Received Mails

          o User is able to white/blacklist sender or sender domain in
            'Quarantined Mails' page.

          o User is able to blacklist sender or sender domain in
            'Received Mails' page.

    * Improvements:

        + Able to sort quarantined mails by spam score.
        + Able to store multiple passwords (userPassword) for user/admin
          account. Sample setting in iRedAdmin config file:

            DEFAULT_PASSWORD_SCHEME = 'SSHA+MD5'

          Check comment lines of parameter 'DEFAULT_PASSWORD_SCHEME' in
          file 'libs/default_settings.py' for more details.

          Thanks Lorenzo Perone <lorenzo.perone@bytesatwork.com> for the help.

        + Able to generate 'CRAM-MD5' password hash with command `doveadm pw`.
        + Able to generate bcrypt password hash with Python module 'bcrypt' or
          'py-bcrypt'.

          It works on BSD systems, but not Linux. Since libc shpped in most
          Linux distributions doesn't support bcrypt, Dovecot cannot verify
          bcrypt hash on Linux.

        + Able to sort mail users by mailbox quota usage percentage.
        + Able to restrict IP addresses where global admin are allowed to login
          from (new setting parameter: GLOBAL_ADMIN_IP_LIST).
        + Show spam score in quarantined page and received mail log page.
        + Able to filter quarantined emails by quarantined type: bad header.
        + Able to set default per-user sender/recipient bcc address for newly
          created mail user.
        + Able to add custom service names for mail users in new parameter
          'ADDITION_USER_SERVICES' in iRedAdmin config file, custom services
          will be displayed in user profile page, under tab "Advanced".
          Sample setting:
          ADDITION_USER_SERVICES = ['vpn', 'jabber', 'ftp']

    * Fixed issues:

        - Not escape random password in account creation page. this bug causes
          iRedAdmin displays an incomplete password.
        - Incorrect regular expression which not support IDN domain name.
        - User email address was still marked as domain admin after user
          account was removed.
          Thanks Rain <rain6966 _at_ gmail.com> for the report.
        - Cannot white/blacklist some IP addresses due to incorrect regular
          expression.
        - Add missing value of enabledService: dsync. Used to control mailbox
          replication via Dovecot dsync.
        - Not correctly show domain status (active/inactive) in domain list
          page when domain is inactive but has custom relay.
        - Empty storageBaseDirectory if we have 'storage_base_directory = /xxx'
          (directory under /) in settings.py.
        - Missing LDAP attribute/value pair: enabledService=indexer-worker.
          Required by Dovecot.
        - Generated random password is longer than max password length.
          Thanks labasus <labas _at_ gmx dot co.uk> for the report.
        - Not detect openSUSE in script tools/upgrade_iredadmin.sh.
        - Duplicate value of 'Received' header while rendering quarantined mail
          headers.

    * Updated translations:
        + Spain (es_ES).
          Thanks informatica _at_ ttu.es.
        + Portuguese (Brazil), (pt_BR).
          Thanks Douglas Medeiros <douglasmedeiros@tic.ufrj.br>.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 (edited by extremeshok 2015-01-05 01:12:39)

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

*IredAdmin Pro whitelists and blakclists are LOST/Deleted on upgrade.

how do we recover and migrate them to the new system ?

We had 100 whitelists and 9000 blakclists, after the upgrade we have 0

3

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

extremeshok wrote:

*IredAdmin Pro whitelists and blakclists are LOST/Deleted on upgrade.

whitelists and blacklists are stored in clurbringer database in old iRedAdmin-Pro releases, they're still there and haven't been deleted.

I'm so sorry that I didn't provide tool to migrate them to amavisd wblist. I will write one these days, please give me some time and keep reminding me.

4

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

ZhangHuangbin wrote:
extremeshok wrote:

*IredAdmin Pro whitelists and blakclists are LOST/Deleted on upgrade.

whitelists and blacklists are stored in clurbringer database in old iRedAdmin-Pro releases, they're still there and haven't been deleted.

I'm so sorry that I didn't provide tool to migrate them to amavisd wblist. I will write one these days, please give me some time and keep reminding me.

When do you think a migrate tool is there to move the whitelists and blacklists to the new cluebringer database?

5

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

The wblist in the latest iRedAdmin-Pro is stored in Amavisd database, do you mean migrate from clurbringer to amavisd?

6

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

Merijn wrote:

When do you think a migrate tool is there to move the whitelists and blacklists to the new cluebringer database?

Dear Merijn,

Attachment is a python script used to migrate Cluebringer white/blacklists to Amavisd database, don't forget to enable iRedAPD plugin 'amavisd_wblist' in /opt/iredapd/settings.py, so that iRedAPD can reject blacklisted senders during smtp session.

How to use it:

*) Make sure you're running the latest iRedAdmin-Pro releases (iRedAdmin-Pro-LDAP-2.2.1, iRedAdmin-Pro-MySQL-1.9.1, iRedAdmin-Pro-PGSQL-1.5.1).

*) Upload to iRedAdmin-Pro directory, under 'tools/' directory. For example, on RHEL/CentOS, it should be /var/www/iRedAdmin-Pro-LDAP-2.2.1/tools/

*) Execute this script:

# cd /var/www/iRedAdmin-Pro-LDAP-2.2.1/tools/
# python migrate_cluebringer_wblist_to_amavisd.py

It will ask for your confirm to migrate Cluebringer white/blacklists to Amavisd database, and optionally delete whitelists/blacklists stored in Cluebringer database.

It's safe to execute this script as many times as you want, it won't generate duplicate SQL records.

This script will be available in next release of iRedAdmin-Pro.

Post's attachments

migrate_cluebringer_wblist_to_amavisd.py 5.33 kb, 18 downloads since 2015-01-11 

You don't have the permssions to download the attachments of this post.

7

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

Very nice Zhang, thank you very much. The migration succeeded!
Another related question. I noticed that i can add new whitelist/blacklist rules. But when I try to delete a line, it comes back when I hit the save button. Is this a bug? Or a configuration issue?

ZhangHuangbin wrote:
Merijn wrote:

When do you think a migrate tool is there to move the whitelists and blacklists to the new cluebringer database?

Dear Merijn,

Attachment is a python script used to migrate Cluebringer white/blacklists to Amavisd database, don't forget to enable iRedAPD plugin 'amavisd_wblist' in /opt/iredapd/settings.py, so that iRedAPD can reject blacklisted senders during smtp session.

How to use it:

*) Make sure you're running the latest iRedAdmin-Pro releases (iRedAdmin-Pro-LDAP-2.2.1, iRedAdmin-Pro-MySQL-1.9.1, iRedAdmin-Pro-PGSQL-1.5.1).

*) Upload to iRedAdmin-Pro directory, under 'tools/' directory. For example, on RHEL/CentOS, it should be /var/www/iRedAdmin-Pro-LDAP-2.2.1/tools/

*) Execute this script:

# cd /var/www/iRedAdmin-Pro-LDAP-2.2.1/tools/
# python migrate_cluebringer_wblist_to_amavisd.py

It will ask for your confirm to migrate Cluebringer white/blacklists to Amavisd database, and optionally delete whitelists/blacklists stored in Cluebringer database.

It's safe to execute this script as many times as you want, it won't generate duplicate SQL records.

This script will be available in next release of iRedAdmin-Pro.

8

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

Thank you

9

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

Merijn wrote:

Another related question. I noticed that i can add new whitelist/blacklist rules. But when I try to delete a line, it comes back when I hit the save button. Is this a bug? Or a configuration issue?

A bug. I will come back with a fix later. Sorry about this trouble.

10

Re: iRedAdmin-Pro-LDAP-2.2.0 has been released

Here's patch to fix white/blacklist bug:
http://www.iredmail.org/forum/post35664.html#p35664