add hint on weak password schemes
This commit is contained in:
parent
3a13a742ea
commit
f873ebe49a
1 changed files with 17 additions and 3 deletions
|
|
@ -77,18 +77,32 @@ mariadb mailserver < mailserver.sql
|
||||||
Obviously any database changes on the old server from now on will have to be done on the new server as well until the
|
Obviously any database changes on the old server from now on will have to be done on the new server as well until the
|
||||||
migration is done.
|
migration is done.
|
||||||
|
|
||||||
|
## Weak password schemes
|
||||||
|
|
||||||
|
Please check if any of your users have hashed passwords that are considered
|
||||||
|
[weak](https://doc.dovecot.org/2.4.2/core/config/auth/schemes.html) by Dovecot. Those passwords using a `PLAIN-MD5`
|
||||||
|
scheme are not accepted by Dovecot by default. But you can enable them again using:
|
||||||
|
|
||||||
|
```sh
|
||||||
|
cat > 99-ispmail-weak-schemes.conf << EOF
|
||||||
|
auth_allow_weak_schemes = yes
|
||||||
|
EOF
|
||||||
|
```
|
||||||
|
|
||||||
|
Your users should change their passwords using Roundcube. That way a new hash with a more secure schema is created.
|
||||||
|
|
||||||
## Roundcube contacts
|
## Roundcube contacts
|
||||||
|
|
||||||
If your users are using Roundcube as a webmail interface then you should migrate their data like their contact lists.
|
If your users are using Roundcube as a webmail interface then you should migrate their data like their contact lists.
|
||||||
Dump the SQL from the old server:
|
Dump the SQL from the old server:
|
||||||
|
|
||||||
```
|
```sh
|
||||||
mariadb-dump roundcube > roundcube.sql
|
mariadb-dump roundcube > roundcube.sql
|
||||||
```
|
```
|
||||||
|
|
||||||
Copy that file to the new server and import it:
|
Copy that file to the new server and import it:
|
||||||
|
|
||||||
```
|
```sh
|
||||||
mariadb roundcube < roundcube.sql
|
mariadb roundcube < roundcube.sql
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
@ -187,7 +201,7 @@ postconf soft_bounce=no
|
||||||
|
|
||||||
If possible do a final backup of the old server. If users are not complaining then dismiss the old system after a week.
|
If possible do a final backup of the old server. If users are not complaining then dismiss the old system after a week.
|
||||||
|
|
||||||
## Unsolved issues
|
## Further issues
|
||||||
|
|
||||||
You may see error messages like:
|
You may see error messages like:
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue