search

RainLoop / rainloop-webmail

Simple, modern & fast web-based email client
http://rainloop.net
MIT License
4.11k stars 891 forks source link

[Feature Request] Plugin plesk-change-password #703

Open Th3Hermit opened 9 years ago

Th3Hermit commented 9 years ago

Hi , thanks for the great app. Would love to see a password change plugin for plesk join the many others.

jas8522 commented 8 years ago

You used to be able to use poppassd with Plesk -- there's a poppassd plugin available, so you could try that out!

I was hoping to build this, but sadly there's no way to do it via Plesk API since the XML-API only works for admins/resellers/customers and not mail users (it returns "permission denied" when trying to access it). Only remaining option would be to have a spot to enter admin details for Plesk in the settings, and authenticate via admin account. This is NOT recommended due to it being a security risk to provide potential access to all domains and email accounts on the server.

DRSchlaubi commented 7 years ago

Isn't it possible to make an plesk extension to solve this problem

jas8522 commented 7 years ago

How would you authenticate the user? See the latest Plesk Onyx XML-API documentation here. It states:

At the moment, the use of the XML API protocol is allowed to Administrator, resellers and customers. These users are provided with programmatic means of managing various Plesk objects they own.

This means that the only very hackish way of accomplishing this that I can think of, would be to authenticate as the mail user via POST or GET, then emulate the actions of the Plesk GUI. This also means that if Plesk changes the way the UI works in the future, the extension would break.

I'd be very happy to be proven wrong on this though :)

The exception, of course, is if you wanted to supply the Rainloop plugin with an admin-level login, but this simply doesn't seem like a good idea from a security standpoint.

DRSchlaubi commented 7 years ago

I ment to integrate Rainloop completely into Plesk like Kolab (https://www.plesk.com/extensions/kolab/)