Re: [SM-USERS] Force to change password after login into squirrelmail

[Rohitashva Sharma]

On 4/4/2012 11:42 PM, Paul Lesniewski wrote:
>> I am using Squirrelmail version 1.4.19 on Scientific Linux with Apache.
>> I have configured change_pass plugin with squirrelmail with poppassd at
>> the IMAP server, so my users can change passwords of their accounts.
>>
>> I have a requirement where user need to change his/her password on the
>> first login. When we create account on IMAP server, we give a default
>> password which need to be changed on first login. The user should not
>> be
>> allowed do anything like read mails, access address book etc.without
>> changing the password.
>>
>> Please suggest how can I achieve this.
> Take a look at the change_sqlpass plugin which has this feature.  It
> can be ported for the most part directly to the change_pass plugin,
> however, you'll need to design a way for the plugin to determine which
> users need to be forced to change their passwords.
>
 Hi Paul,

 Thanks for your reply.

 I had a look at the change_sqlpass and change_pass plugin. I have also
 devised a mechanism to identify the user whose password need to be
 forcibly changed and developed a small plugin for this. I attached the
 plugin as 'webmail_top' hook. The problem is that as soon as the user
 logs in, my plugin prompts the user to change the password but the user
 is allowed to click on other links like INBOX, Compose etc and he has a
 choice not to change the password.

 What I want is that the user should not be able to do anything without
 changing the password. Please suggest how is that possible.
>>> The change_sqlpass plugin is more restrictive, so as I suggested,
>>> please refer to it.
>>>
>>> If you want to limit user actions even more than change_sqlpass
>>> plugin, please have a look at the hook list in the plugin development
>>> guidelines or grep the source for hooks in the places you need.
>>>
>> Thanks Paul,
>>
>> I got the idea from change_sqlpass plugin and registered my plugin in
>> 'right_main_after_header' hook . Now I am able to prevent the links on the
>> left_side to go my change password page. This fulfills my partial
>> requirement as this does not stop user to click and use the menu items in
>> right frame. Is there any hook like right_main_before_header (I could not
>> find in documentation) which I can use to prevent user to use menu items in
>> right frame as well.
> The change_sqlpass plugin works as such because the presumption is
> that the user is logging in to read email.  They cannot read any email
> until they change their password.  They can change some user settings,
> but the account is still useless until the password is changed.
>
> If you want more lockout, there are several ways to accomplish this,
> but you're going to have to get more creative and familiar with the
> code of the pages you wish to modify.  There's always the
> "generic_header" hook, but you should stay away from that as much as
> possible in the name of performance.  You can do things on the
> "menuline" hook and each of the linked core pages on the menu line
> will have hooks in them you can use.
>
Thanks a lot Paul,

At this stage, it is fine to have these restriction as account is 
unusable until the user changes the password. I will dig deep in 
'menuline' hook and other things if required.

regards
Sharma

--
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: [SM-USERS] [Dovecot] vacation plugins for squirrelmail

[Daminto Lie]

Thank you folks for your replies.

I realised that the dovecot 1.2.9 that I installed via ubuntu synaptic package 
manager has already come with sieve plugins. After making some modifications on 
the dovecot.conf file, I went to download and install avelsieve 1.0.1 (stable 
version) onto the squirrelmail. Then, I run in squirrelmail conf.pl and added 
the plugin. I logged in and could see "Filter" option right on the top header 
row. I went to click it and nothing came up. I checked in the mail.log but did 
not see any errors there.

Here is my snapshot of dovecot configuration
# 1.2.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-40-generic-pae i686 Ubuntu 10.04.4 LTS ext4
log_timestamp: %Y-%m-%d %H:%M:%S 
protocols: imap
listen: *:143
ssl: no
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable: /usr/lib/dovecot/imap-login
verbose_proctitle: yes
first_valid_uid: 1001
last_valid_uid: 600
mail_privileged_group: mail
mail_location: maildir:/var/vmail/%u/Maildir
mbox_write_locks: fcntl dotlock
imap_client_workarounds: outlook-idle delay-newmail netscape-eoh 
tb-extra-mailbox-sep
lda:
  postmaster_address: postmas...@ourcompany.com
  mail_plugins: sieve
  quota_full_tempfail: yes
  deliver_log_format: msgid=%m: %$
  sendmail_path: /usr/lib/sendmail
  rejection_reason: Your message to <%t> was automatically rejected:%n%r
  auth_socket_path: /var/run/dovecot-auth-master
auth default:
  mechanisms: plain login
  username_format: %Lu
  verbose: yes
  debug: yes
  debug_passwords: yes
  passdb:
    driver: pam
  passdb:
    driver: ldap
    args: /etc/dovecot/dovecot-ldap.conf
  userdb:
    driver: passwd
  userdb:
    driver: static
    args: uid=1001 gid=1001 home=/var/vmail/%u allow_all_users=yes
  socket:
    type: listen
    client:
  path: /var/spool/postfix/private/auth
  mode: 432
  user: postfix
  group: mail
    master:
  path: /var/run/dovecot-auth-master
  mode: 432
  user: vmail
  group: vmail
plugin:
  sieve: /var/vmail/%u/.sieve

Also, I have restarted dovecot after making changes to the dovecot.conf.

Any help would be very much appreciated.

Thank you

  



 From: Artur Zaprzała 
To: Dovecot Mailing List  
Cc: Daminto Lie  
Sent: Thursday, 12 April 2012 11:46 PM
Subject: Re: [Dovecot] vacation plugins for squirrelmail
 
Daminto Lie wrote:
> Hi,
>
> I am afraid I have a question to ask of you all. I have just completed 
> setting up a mail server running on Ubuntu Server 10.04. It has postfix, 
> dovecot 1.2.19, LDAP and squirrelmail as the webmail. I have also created 
> virtual users accounts on the system through LDAP. I can send and receive 
> mails which is great. Now, what I am trying to do is to set up a vacation 
> auto-reply on the squirrelmail so that users who are about to go on vacation 
> can set it up themselves. I was looking around for the vacation plugins for 
> dovecot that I can incorporate it into squirrelmail.
>
> Any help would be very much appreciated.
>
> Thank you
>
I'm using Avelsieve 1.9.9 with a set of my own bugfixes: 
http://email.uoa.gr/avelsieve/


-- 
Talex Spółka Akcyjna z siedzibą w Poznaniu
adres: ul. Karpia 27d, 61-619 Poznań
NIP 782-00-21-045
zarejestrowana w Sądzie Rejonowym Poznań – Nowe Miasto i Wilda w Poznaniu
VIII Wydział Gospodarczy - KRS pod nr 48779
kapitał zakładowy: 3.000.092,00 PLN (w całości wpłacony)

Uwaga: Niniejsza wiadomość, w szczególności jej treść oraz załączniki, może być 
poufna. W przypadku, gdy nie jest Pan/Pani zamierzonym jej adresatem, 
informujemy, że wszelkie rozpowszechnianie, dystrybucja lub powielanie 
powyższej wiadomości jest zabronione. Jednocześnie prosimy o powiadomienie 
nadawcy oraz niezwłoczne usunięcie powyższej wiadomości wraz z załącznikami.
Dziękujemy, Talex S.A. w Poznaniu.

Confidentiality Notice: This email, particularly its content and any attached 
files, may be confidential. If you are not an intended recipient, any 
disclosure, distribution and reproduction of this message is prohibited. In 
this case please notify the sender immediately and then delete this message and 
any attachments.
Thank you, Talex S.A., Poznan.--
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second 
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users