1 Topic by maz

  • maz
  • Member
  • Offline
  • Registered: 2021-09-13
  • Posts: 11

Topic: Special characters in password ?

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.4.2
- Deployed with iRedMail Easy or the downloadable installer? the downloadable installe
- Linux/BSD distribution name and version: debian 11
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello,

As I did not get any answer to my DB problem, I am creating a new server from scratch and I will migrate all mail accounts and emails from the old one to the new one.

During install process, it was asked not to use special characters in postmaster password. So I did not use special characters.

But, can I modify the password after installation process with special characters ? And what about other emails account ? Is there a problem with special characters ?

Thanks for your help.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: Special characters in password ?

postfix uses plaintext login by default, which is no problem at all since it only accepts ssl or tls
so special chars might result in authentication errors even if the password is correct

3 Reply by maz

  • maz
  • Member
  • Offline
  • Registered: 2021-09-13
  • Posts: 11

Re: Special characters in password ?

I thought passwords were hashed.

It would mean one could try to find an exploit using malicious password ?

Ok. So should I change all passwords containing special chars with long alphanum password ?

4 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: Special characters in password ?

i guess there is no really need for this, no known exploits, but it COULD result in auth errors, and yeah the passwords are hashed, but the authentication itself is plaintext

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Special characters in password ?

maz wrote:

But, can I modify the password after installation process with special characters ? And what about other emails account ? Is there a problem with special characters ?

Sure you can use special characters in passwords AFTER installation.
The reason the iRedMail installer requires no such char is because handling it in shell script may cause some issue.