1

Topic: Encoding problems with passwords

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8 OPENLDAP edition
- Linux/BSD distribution name and version: Ubuntu 18.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,

We've installed iRedMail on a machine running Ubuntu 18.04 using LDAP as backend for accounts. The LDAP is used as well as backend for a moodle and nextcloud installation. Unfortunately we discovered a problem with the encoding in Roundcube/the mail server.

We create our users using a shell script which encrypts the password with SSHA. It works great. At least that's what we thought. But unfortunately we found out now that we get problems if we e.g. use umlauts in the password (ä,ö,ü) and change or set the password in LDAP via shell.
If we do this, users will still be able to login to NextCloud and Moodle, but not to Roundcube.

A similar problem occurs when users change their password. Our users usually do this in Roundcube. However, if they use an umlaut here, they can log in to Roundcube with the new password but no longer to the other services connected to LDAP.

Seems to be a bug. Is the encoding set incorrectly per default in Roundcube/the mail server?

Thanks in advance!

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 (edited by alex42 2018-11-15 01:49:59)

Re: Encoding problems with passwords

I've found this in the defaults.inc.php of RC:

$config['password_charset'] = 'ISO-8859-1';

Shouldn't this set per default to UTF-8? Will it be safe to change it?

3

Re: Encoding problems with passwords

You can change it to utf-8, but it still depends on whether your applications support it. So please test it first.