From f873ebe49a3fcf2a556f1bd598c5de7c4bdf4fb6 Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Tue, 4 Nov 2025 22:00:31 +0100 Subject: [PATCH] add hint on weak password schemes --- .../docs/ispmail-trixie/110-upgrading.mdx | 20 ++++++++++++++++--- 1 file changed, 17 insertions(+), 3 deletions(-) diff --git a/src/content/docs/ispmail-trixie/110-upgrading.mdx b/src/content/docs/ispmail-trixie/110-upgrading.mdx index 03cd3ce..4f0732f 100644 --- a/src/content/docs/ispmail-trixie/110-upgrading.mdx +++ b/src/content/docs/ispmail-trixie/110-upgrading.mdx @@ -77,18 +77,32 @@ mariadb mailserver < mailserver.sql Obviously any database changes on the old server from now on will have to be done on the new server as well until the migration is done. +## Weak password schemes + +Please check if any of your users have hashed passwords that are considered +[weak](https://doc.dovecot.org/2.4.2/core/config/auth/schemes.html) by Dovecot. Those passwords using a `PLAIN-MD5` +scheme are not accepted by Dovecot by default. But you can enable them again using: + +```sh +cat > 99-ispmail-weak-schemes.conf << EOF +auth_allow_weak_schemes = yes +EOF +``` + +Your users should change their passwords using Roundcube. That way a new hash with a more secure schema is created. + ## Roundcube contacts If your users are using Roundcube as a webmail interface then you should migrate their data like their contact lists. Dump the SQL from the old server: -``` +```sh mariadb-dump roundcube > roundcube.sql ``` Copy that file to the new server and import it: -``` +```sh mariadb roundcube < roundcube.sql ``` @@ -187,7 +201,7 @@ postconf soft_bounce=no If possible do a final backup of the old server. If users are not complaining then dismiss the old system after a week. -## Unsolved issues +## Further issues You may see error messages like: