Need testers for RoundCube Password Plugin

ss88us

Hey everyone,

I've created a RoundCube change password plugin for Enhance CP. It lets your users change their email address password in RoundCube by utilizing the default Orchd API key available in the RoundCube config.inc.php file.

Demo Visual

You can find it on GitHub here: https://github.com/SS88UK/enhance_password

If you experience any errors, please copy/paste the error. A log file of errors is also kept in /path/to/roundcube/plugins/enhance_password/enhance_password.log

Thanks!

8Dweb

ss88us Thanks, will test on our test server tomorrow.

mendozal

ss88us I'm appear to be missing orchd_key and orchd_url in the config.inc.php for customer's roundcube (mail.customerdomain.com). I was getting API details missing.

So configured both of them (copied it from the main roundcube install) and after that it started to work.

Shaijee

8Dweb Have you tested it? How is it? Your feedback would be greatly appreciated.

badboybackagain

can anyone please confirm, if this is working?

Shaijee

@Adam, can you please confirm if this plugin is working well and is safe to use?

tobias

Works like a charm. Thanks! Validation of the old password in advance would be a great addition.

ss88us

mendozal Thanks! You are right.

I will update my Github soon with this new information. The customer's RoundCube does not contain these variables anywhere within the installation, so they must be set in config.inc.php in order for the customer to change the password.

tobias I will add this to my feature list as I think that's a good security enhancement!

jayparalejas

I tried this plugin, but the api now requires an additional header for orgId.

Can you update the plugin? Also when will this feature be implemented on the enhance panel?

ss88us

jayparalejas I have not tested yet however, the API docs do not state that: https://apidocs.enhance.com/#/email-client/UpdateEmailPassword

mendozal

I tested it today and it's still working.

ss88us

mendozal Thank you for testing! I tested this morning too and it's still working as expected.

mendozal

I'm still using this. But after the v12 upgrade I'm getting an Unauthorized message when the plugin makes the api call. I even created a new token, no luck. Is anyone else having this issue?

ss88us

mendozal Did you see Adam's post here? https://community.enhance.com/d/2420-version-1200-central-webmail-fix/5

I won't be upgrading to v12 for about 1 week but once I have I'll release a fix.

ss88us

mendozal I just tested after upgrading and for me it's working as expected once the value for $config['orchd_key'] was changed.

Let me know if you're still experiencing issues!

Thomas_W

ss88us thanks ss88us!

I just installed it at the newest Enhance V12 and it works perfect. I got first a 403 Error from the API, there I had to disable the orchd URL at the WAF from cPFence.

SeLi

Thomas_W Hi could you tell how you disable it on WAF?

xyzulu

SeLi see https://community.enhance.com/d/2404-cpfence-ui-is-here-security-management-now-with-a-mouse/66

Thomas_W

SeLi the whole description you find at the link from xyzulu. Here the short version.
cpfence --ui
3 WAF Management
3 Disable WAF for Domain
Enter the orchd URL
7 Save & Exit

ss88us

Thanks everyone for interjecting with solutions to get this working. I appreciate it!