<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="moz-cite-prefix">On 2/20/19 3:28 PM, Robert Moskowitz
via dovecot wrote:<br>
</div>
<blockquote type="cite"
cite="mid:45da7bf6-0daf-73b8-4a93-681ac41e6efd@htt-consult.com"> <br>
<blockquote type="cite"
cite="mid:d89b3611-a2ec-74bf-5d95-a0d04f94bca5@algerian-radio.dz">
<p>Here's how I configured my roundcube's password plugin to
keep things together
($roundcubefolder/plugins/password/config.php)<br>
</p>
<pre>$config['password_algorithm'] = 'dovecot';</pre>
<pre>$config['password_algorithm_prefix'] = '{SHA512-CRYPT}';</pre>
<pre>$config['password_dovecotpw_method'] = 'SHA512-CRYPT';</pre>
<pre>$config['password_query'] = "UPDATE mail.users SET password=%P WHERE email=%u LIMIT 1";</pre>
<p>I left other fields alone.<br>
</p>
<p>Yassine.<br>
</p>
</blockquote>
Thanks much better info than I was seeing in my googling. Except
I would not use %p:<br>
<br>
<pre><span class="c1">// The SQL query used to change the password.</span>
<span class="c1">// The query can contain the following macros that will be expanded as follows:</span>
<span class="c1">// %p is replaced with the plaintext new password</span>
<span class="c1">// %c is replaced with the crypt version of the new password, MD5 if available</span>
<span class="c1">// otherwise DES.</span>
<span class="c1">// %D is replaced with the dovecotpw-crypted version of the new password</span>
[...]<span class="c1"></span>
<span class="c1"></span></pre>
<br>
%D seems to be what I want...<br>
<br>
</blockquote>
<p>the rcmail_config[] syntax you pasted in your mail indicates
you're using a very old version of roundcube. Here's the relevant
content of my version of the password plugin : <br>
</p>
<pre>// The SQL query used to change the password.
// The query can contain the following macros that will be expanded as follows:
// %p is replaced with the plaintext new password
// %P is replaced with the crypted/hashed new password
// according to configured password_method
[...}
// Deprecated macros:
// %c is replaced with the crypt version of the new password, MD5 if available
// otherwise DES. More hash function can be enabled using the password_crypt_hash
// configuration parameter.
// %D is replaced with the dovecotpw-crypted version of the new password
[...]</pre>
<p><br>
</p>
<p>Notice the difference b/w %p and %P. Also notice that %D is
marked as deprecated.<br>
</p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:45da7bf6-0daf-73b8-4a93-681ac41e6efd@htt-consult.com">
And in mysql, I believe the table is mailbox.<br>
<br>
</blockquote>
Oh that depends entirely on your choice of naming and what table
structure you have chosen.<br>
<blockquote type="cite"
cite="mid:45da7bf6-0daf-73b8-4a93-681ac41e6efd@htt-consult.com"> <br>
I got from:
<a class="moz-txt-link-freetext"
href="https://kaworu.ch/blog/2016/04/20/strong-crypt-scheme-with-dovecot-postfixadmin-and-roundcube/"
moz-do-not-send="true">https://kaworu.ch/blog/2016/04/20/strong-crypt-scheme-with-dovecot-postfixadmin-and-roundcube/</a><br>
<br>
</blockquote>
<p>Ah, it seems Aki and I have already visited this link before ^^'</p>
<p>Yassine.<br>
</p>
<p><br>
</p>
<p><br>
<br>
</p>
</body>
</html>