search

servisys / ispconfig_setup

ISPConfig autoinstaller and setup
GNU General Public License v3.0
507 stars 257 forks source link

User/passwd on Roundcube config.inc.php #312

Closed calbasi closed 1 year ago

calbasi commented 4 years ago

Hi, after an succesful install (Debian 10, apache2), I get these messages:

The default ISPConfig Username is: admin and the Password is: admin Warning: This is a security risk. Please change the default password after your first login.

You will need to edit the username and password in /var/lib/roundcube/plugins/ispconfig3_account/config/config.inc.php of the roundcube user, as the one you set in ISPconfig

I wonder:

  1. First, does it mean I should use "admin" user and my ispconfig passwd in this roundcube file?
  2. Second, it's insecure, isn't it? Because any user can access to this file... And password is configured in plain text...
calbasi commented 4 years ago

Hi, I was wrong about this password, because it's not the ispconfig admin password but a new roundcube password you should create. From here:

Roundcube does not use the ispconfig admin user login. Roundcube uses a remote user with limited permissions that you have to add in ispconfig under System > remote users.

I think this notice should be more clear.

calbasi commented 4 years ago

I've did a pull request #316 Could you check it, @servisys ?

calbasi commented 1 year ago

The pull request was merged on 2020. Closing this issue.