add hint on weak password schemes

This commit is contained in:
Christoph Haas 2025-11-04 22:00:31 +01:00
parent 3a13a742ea
commit f873ebe49a

View file

@ -77,18 +77,32 @@ mariadb mailserver < mailserver.sql
Obviously any database changes on the old server from now on will have to be done on the new server as well until the Obviously any database changes on the old server from now on will have to be done on the new server as well until the
migration is done. migration is done.
## Weak password schemes
Please check if any of your users have hashed passwords that are considered
[weak](https://doc.dovecot.org/2.4.2/core/config/auth/schemes.html) by Dovecot. Those passwords using a `PLAIN-MD5`
scheme are not accepted by Dovecot by default. But you can enable them again using:
```sh
cat > 99-ispmail-weak-schemes.conf << EOF
auth_allow_weak_schemes = yes
EOF
```
Your users should change their passwords using Roundcube. That way a new hash with a more secure schema is created.
## Roundcube contacts ## Roundcube contacts
If your users are using Roundcube as a webmail interface then you should migrate their data like their contact lists. If your users are using Roundcube as a webmail interface then you should migrate their data like their contact lists.
Dump the SQL from the old server: Dump the SQL from the old server:
``` ```sh
mariadb-dump roundcube > roundcube.sql mariadb-dump roundcube > roundcube.sql
``` ```
Copy that file to the new server and import it: Copy that file to the new server and import it:
``` ```sh
mariadb roundcube < roundcube.sql mariadb roundcube < roundcube.sql
``` ```
@ -187,7 +201,7 @@ postconf soft_bounce=no
If possible do a final backup of the old server. If users are not complaining then dismiss the old system after a week. If possible do a final backup of the old server. If users are not complaining then dismiss the old system after a week.
## Unsolved issues ## Further issues
You may see error messages like: You may see error messages like: