1 Topic by sergiocesar

  • sergiocesar
  • Member
  • Offline
  • Registered: 2014-04-28
  • Posts: 94

Topic: can not login to cluebringer

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.1
- Linux/BSD distribution name and version: centos 6
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Web server (Apache or Nginx):apache
- Manage mail accounts with iRedAdmin-Pro?  pro yes.
- Related log if you're reporting an issue:
====
it refuses to allow me to login.
I have noticed that all passwords are stored in the database and they are preceeded by {CRYPT}
or {PLAIN} if I select to store a plain text password.
Then I try to use the plain text password and added the {PLAIN} to the password and it allowed me to go in OK
How can I fix this? why are all passwords prefixed like this as it seems like the prefix chars are also part of the password?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: can not login to cluebringer

iRedMail supports multiple password schemes, and the '{CRYPT}', '{PLAIN}' are just password scheme names to help Dovecot/Apache understand which password scheme we're dealing with.

You can use salted MD5 password hash too (with prefix "{CRYPT}").

3 Reply by sergiocesar

  • sergiocesar
  • Member
  • Offline
  • Registered: 2014-04-28
  • Posts: 94

Re: can not login to cluebringer

I assume that is the case as I am able to login on Roundcube,Dovecot but not Apache that in this case it seems not able to handle the extra characters in the password as demonstrated by the need to add the prefix to the clear text password.

How do we fix that? to be able to login on cluebringer.

this is the config file that was installed by IredMail
/etc/httpd/conf.d/cluebringer.conf

<Directory /usr/share/cluebringer/webui/>
    DirectoryIndex index.php
    Options ExecCGI
    Order allow,deny
    #allow from 127.0.0.1
    allow from all
    AuthType basic
    AuthName "Authorization Required"
    AuthMYSQLEnable On
    AuthMySQLPwEncryption none
    AuthMySQLHost 127.0.0.1
    AuthMySQLPort 3306
    AuthMySQLUser vmail
    AuthMySQLPassword xxxxxxxxxxxxxxxxxxxxxxx
    AuthMySQLDB vmail
    AuthMySQLUserTable mailbox
    AuthMySQLNameField username
    AuthMySQLPasswordField password
    Require valid-user
</Directory>

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: can not login to cluebringer

Use a salted MD5 password. Reference:
http://www.iredmail.org/docs/reset.user.password.html