ohartl / webmum Goto Github PK

I dont think its safe to have a plaintext password for the mysql databas in the config file

Shouldn't a list like that exist?

And should this be displayed directly in the personal dashboard or an own page?

You can assign this one to me!

I checked some Ideas for making everything responsive and here is the suggestion I came up with. Even if webmum is very simple I would use two external repositories because they are very small and well coded.

1. Grid: gridism as it's a very simple but nice grid system
2. Mobile Menu: slideout.js (6.9KB) which provides a mobile menu and touch slide functionallity

I also transformed the css to scss (sass) because it's great.

I just pushed a branch dev-responsive which shows a proof-of-concept. Please tell me what you think about this approach and I will proceed working on it.

Sincerly,
Leo

Defining a new aliases with webmum is not possible (for me).

There was an error running the query [Column count doesn't match value count at row 1]

But if I define one directly via mysql it is shown in the webpage.

I'm not sure, where the problem lies.

Hey,

The password is not saved to the database.

The Problem is when you create a User, change password myself or
Change Password from a other user.

if you create a User the password variable is empty so the database column "password" is empty
If you change the Password in the Manage User site, then the password does not change
if you change the password over the Personal changes so then your own Password was changed

I don't now if this is the right place to tell you but your demo isn't working.
If I type in the credentials it says: Sorry, couldn't log you in :(

Maybe you could fix this so I can take a look at the software before installing it?

Hallo,

Ich habe derzeit ein Problem.

Ich habe den Mailserver nach dem Tut von Thomas-Leister.de gemacht.
und kann mich aber nicht im Webmum einloggen mit der postmaster adresse weil der mir sagt dass die tabelle users nicht existiert..

bitte hilf mir.

Lg

Hello ohartl,

first of all: Thanks for developing and helping! It is an great tool! Thanks!

Today i installed the actual Branch of webmum via "git clone https://github.com/ThomasLeister/webmum". I had an working install, but i would the newer version of webmum and a easy way to update, so i moved the old install from .../webmum to .../webmum-old and installed the new version.

Then i copied the config.php.example to config.php and edit the config-file. In the "options" section i enabled the
'enable_admin_domain_limits' => true,
and i added an Domainadmin:
'admin_domain_limits' => array(
'[email protected]' => array('domain.tld'),
),
then i restart the apache and look. But it doesn't work. Must i change any entry in the users table at the database? I upgraded an existing user to Domain-Admin.

Hi,

would it be possible to get a ldap integration/import? Maybe just pull a whole list from LDAP and create accounts?

while installed flag is not set, the user cannot access use other pages then installation.

1. getting started
   • info
   • ask for write access in config/
   • other requirements (php, php settings, ..)
2. database
   • install basic database schema if not already exists (ask the user)
   • otherwise: give them the option to map the database
   • save database configuration
3. general configuration of WebMUM
   • encryption algorithm, set password length
   • mailbox limit or no?
   • multi source redirects or no?
   • validate that redirect source addresses are using domains installed?
   • front end options
4. admin setup
   • ask if admin/admins already exists or create them
   • add admin/admins to configuration
5. final step
   • before: set installed flag -> not installation possible anymore
   • require user to remove write access dir config/ again
6. finished
   • maybe the give user a little introduction

Display error if redirect conflicts with new account

It would be really great if multiple admins email addresses could be set.

&thx for this great simple (simply great :) software :)

Check if e-mail account /domain already exists

Case

You want to redirect [email protected], [email protected] and [email protected] to [email protected].

Now

You have to create 3 Redirects:

My desire

You create one Redirect:

And the script creates the other entrys itself.

Let users register their own accounts. Admin can active new accounts.

I have installed webmin as described and i have copied the config file and delete to sample file.
But the page shows me the same message.

getting error within apache errorlog.
This is caused by the rewriting magic.
(Whats the use of the rewriting anyway?)

[Sun Jan 31 17:50:38.958693 2016] [ssl:debug] [pid 26491] ssl_engine_kernel.c(354): [client 127.0.0.1:38599] AH02034: Subsequent (No.2) HTTPS request received for child 0 (server webmum.MYURL.TLD:443)
[Sun Jan 31 17:50:38.958940 2016] [authz_core:debug] [pid 26491] mod_authz_core.c(809): [client 127.0.0.1:38599] AH01626: authorization result of Require all granted: granted
[Sun Jan 31 17:50:38.958961 2016] [authz_core:debug] [pid 26491] mod_authz_core.c(809): [client 127.0.0.1:38599] AH01626: authorization result of <RequireAny>: granted
[Sun Jan 31 17:50:38.960175 2016] [core:error] [pid 26491] [client 127.0.0.1:38599] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Sun Jan 31 17:50:38.960192 2016] [core:debug] [pid 26491] core.c(3613): [client 127.0.0.1:38599] AH00121: r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960204 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960215 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960224 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960233 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960242 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960251 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960260 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960268 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/php5-fcgi/
[Sun Jan 31 17:50:38.960277 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /php5-fcgi/
[Sun Jan 31 17:50:38.960285 2016] [core:debug] [pid 26491] core.c(3620): [client 127.0.0.1:38599] AH00122: redirected from r->uri = /

after login, a blank page is shown. only after a page reload

[Admin Dashboard]
[Personal Dashboard]

are shown.

I'm not sure, but I think the problem lies in webmum/include/php/pages/login.php at line 14

I started to share my server with an ngo and i would really appreciate this functionallity. It's a share-of-trust but who knows :)

My php skills are limited so i would try to contribute in another way..

It should not be possible to delete the admin user's e-mail account or domain (which includes deleting his account).

This would be helpfull since for example edit fields wouldnt be autofilled by the browser.
For example in the edituser page when the username is recognized by the browser-autocomplete it fill prefill the password field.

In general password fields should not be prefilled or prefillable on registration and password edit pages.

Under https://github.com/ThomasLeister/webmum/graphs/traffic everybody can see some urls to WebMUM installs, thats not good. If a security vulnerability is found by someone, he can directly visit some installs.

One solution would be to use an url shortener without stats for those urls, any other idea tough?

Warning: Cannot modify header information - headers already sent by (output started at /var/www/vhosts/xxxxxx/docs/mum/include/php/template/header.php:5) in /var/www/vhosts/xxxxxx/docs/mum/include/php/pages/start.php on line 3

Notice: Undefined variable: quota in /var/www/vhosts/xxxxxx/docs/mum/include/php/pages/admin/edituser.php on line 75

Woran kann dies liegen bei uns läuft php 7 auf Fcgi basis

referenced blog-post of the tutorial: https://thomas-leister.de/allgemein/sicherer-mailserver-dovecot-postfix-virtuellen-benutzern-mysql-ubuntu-server-xenial/

@ThomasLeister maybe you could state the necessary changes in this issue.

Dein Tool gefällt mir sehr gut, allerdings wüsste ich noch ein paar Sachen die nützlich währen.

1. Ein öffentliches anlegen von Benutzern mit Freischaltung durch den Administrator
2. Eine Backup Funktion der Mailverzeichnise und Datenbank ev. mit Upload auf einen anderen Server (ftp)

Ich bin gerade dabei das selbst umzusetzen, aber ich denke dass Sie das wesentlich professioneller können ;)

Currently there is just SHA512-CRYPT supported by WebMUM.
More password schemes schould be supported in future versions.

Hallöööchen ^^

Wass Müsste ich alles an dem Setup vom Mailserver ändern oder Andersrum damit es mit dem Neustem Webserver funktioniert?

LG

Steps to reproduce:

1. Login to WebMUM-Admin
2. Select "Manage Redirects"
3. Select "Create new Redirect"
4. Insert more than one line on one or both sites
5. Save settings
6. Try to send a mail to one of the addresses set up on the left side
   -> The mail will bounce