sandrodz / rainloop-change-password-plugin-mysql Goto Github PK

I have vimbadmin to manage the postfix accounts.
This software keeps all credentials in:
-dabatase: vimbadmin
-table: mailbox
-column: password
-user: vimbadmin
-password: ---

It keeps it in MD5 codification, but when I use this plugin from my email account it never runs properly.
My error logs:

2015/02/16 15:05:43 [error] 17563#0: *4012 FastCGI sent in stderr: "PHP message: PHP Notice: Undefined offset: 0 in /var/www/rainloop/public_html/data/_data_b6d7009c76b044100a189b32856d83e0/default/plugins/change-password-mysql/ChangePasswordMysqlDriver.php on line 184" while reading response header from upstream, client: 192.168.0.15, server: correuweb.tiraquelibras.com, request: "POST /?/Ajax/&s=/_Lm3D8OQQI8dGDxbKszs9eEPbdnvVKW6bVH2bEYtqQCeHA6D7edfkDgPbH7IL6om-rmW17GZXv8TwjUp-A0pLSUvdiU4tAzhu4_T027yvz4CENRx83hk8GOmzl3LBr5JYm_NpGdyc3m_RbgVK0RYgYTTHjBhbJ-JPewEEGseE1YdSYim6Oskj9LVkxCVCKgwhn_6ZvDZMt-DVqNsaFLqjvrjpoPZZQUvxwI0zOudNsiU9jx0e_2neqwNtZTfb-4e1qLP2I_1Rv8OKVf0FjMdBMMcFSNEtiJewzRS7W2YBi3sXgzQwtzV6xndoGiILG3cPTV3YC3PuxI9QUmos40q0RrGVycg./ HTTP/1.1", upstream: "fastcgi://unix:/var/run/php5-fpm.sock:", host: "correuweb.tiraquelibras.com", referrer: "https://correuweb.tiraquelibras.com/"

Can you help me to find the problem, please?

Regards

After installing the plugin with all correct credentials for accessing database and tables, changing the password fails with the notice "INFO[DATA]: Something went wrong. Either current password is incorrect, or new password does not match criteria."

Echoing the sql statement seems a little problematic with PDO mysql, so I cannot exactly observe how the plugin is 'talking' to mysql.

My mailserver stores passwords in the mysql users table as ENCRYPT($password, CONCAT('$6$', SUBSTRING(SHA(RAND()), -16).

The plugin, however, uses crypt() and mb_strlen to compare hashes of stored passwords.
I think ENCRYPT() and the way hashes are compared in the plugin do not match ..

Maybe the ENCRYPT() function for mysql is not the right way to store password, in the context of this plugin.

One way to overcome the problem is to alter code in the plugin so it matches my criteria, however I think it is better to alter the layout of the mysql password storage.

Does anyone have suggestions for storing passwords, so it meets the conventions in the plugin?

Hi Sandrodz,

Do you know if postgres support is feasible?
I tried replacing mysql with pgsql but that didn't worked of course ^^
(sorry for the question I just have no time to investigate it atm)

Thanks for your response :)

It does not seem to work with the 1.6.9.167 version of rainloop.

Hello sandrodz

Thanks for your plugin ! I made some changes to make it support postgresql.
I'd like to redistribute it. What is the licence of the project ?
Thanks :)

Hi Sandrodz,

I activated this plugin in the admin panel and correctly filled out all the parameters.
Then I went to the user panel to change password.
But I got the error:Could not save new password
Since I can't find the rainloop error log path in my Centos6 server,I don't know what's wrong either.
Could you help me and give me some advises.

Thanks.

Hi im using rainloop with virtual users in mysql database.
im trying tomake password change work for me.

im wondering where i need to drop the code of the mysql-plugin in my rainloop installation. i guess then i schould be able to activate it in the controlpanel!?

i tryed poppsassd but noticed its the wrong way!

thanks for quick help!