1 Topic by lsdaniel

  • lsdaniel
  • Member
  • Offline
  • Registered: 2020-03-01
  • Posts: 8

Topic: password policy: 65535 grace: -1 expire: -1

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.4 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: Debian 11.7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): 10.5.19-MariaDB
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No, iRedAdmin
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

2023-07-31 09:38:09.760 sogod[4953:4953] MySQL4 connection established 0x0x564cdcad60f0
2023-07-31 09:38:09.760 sogod[4953:4953] ---------- -[MySQL4Channel openChannel]: <MySQL4Channel[0x0x564cdccc6620] connection=0x0x564cdcad60f0> opens channel count[0]
2023-07-31 09:38:09.760 sogod[4953:4953] MySQL4 channel 0x0x564cdccc6620 opened (connection=0x0x564cdcad60f0,sogo)
2023-07-31 09:38:09.760 sogod[4953:4953] <MySQL4Channel[0x0x564cdccc6620] connection=0x0x564cdcad60f0> SQL: SELECT c_password FROM users WHERE c_uid = 'daniel@xxxx.com.cn';
2023-07-31 09:38:09.761 sogod[4953:4953] <MySQL4Channel[0x0x564cdccc6620] connection=0x0x564cdcad60f0>   query has results, entering fetch-mode.
Jul 31 09:38:09 sogod [4953]: SOGoRootPage Login from '192.168.0.12' for user 'daniel@xxxxx.com.cn' might not have worked - password policy: 65535  grace: -1  expire: -1  bound: 0
Jul 31 09:38:09 sogod [4953]: |SOGo| request took 0.003477 seconds to execute


I migrated the old iredmail to the latest version, the password schemes is MD5, I changed the iredadmin (setting.py and the libs about password method) and roundcube (config.inc.php) configuration about it. I can login and change password for users and check the field password in table mailbox the scheme is {MD5}XXXXXXXXXXXXXXXXX.

But I can not login the SoGo web with the scheme password {MD5}XXXXXXXXXXXXXXXX, is there any method to resolve this problem?

I opened the debug options in the sogo.conf, then I got the logs above.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: password policy: 65535 grace: -1 expire: -1

don't use MD5, use SSHA512

MD5 isn't used by iredmail for a very very long time and should be avoided in any possible case

3 Reply by lsdaniel

  • lsdaniel
  • Member
  • Offline
  • Registered: 2020-03-01
  • Posts: 8

Re: password policy: 65535 grace: -1 expire: -1

Cthulhu wrote:

don't use MD5, use SSHA512

MD5 isn't used by iredmail for a very very long time and should be avoided in any possible case

We plan migrate from the old iredmail to the latest iredmail and use iredadmin-pro manage it. and we have othere applicateion auth with this password and the scheme is MD5. so I want to use the old password scheme.

I do not have their password. so we have to let users change their own password ASAP.

The other question : May I have few of users use the MD5 scheme password? because they do not use sogo roundcube iredadmin.

4 Reply by lsdaniel

  • lsdaniel
  • Member
  • Offline
  • Registered: 2020-03-01
  • Posts: 8

Re: password policy: 65535 grace: -1 expire: -1

I changed the userPasswordAlgorithm = ssha512 and it works fine.