Notes on Roundcube installation

Roundcube is a web application serving webmail. It uses a mysql/mariadb database called roundcubemail Our implementation has roundcube/webmail running on vm1 on apache, with SMTP/25 outgoing mail going to vm2 and reading incoming mail from vm3 that has dovecot as the mail LDA. (local delivery agent).

Access the database on vm1 as follows: mysql -u root -p

• show databases
• use roundcubemail
• show tables
• SELECT user, password FROM user

MariaDB [roundcubemail]> show COLUMNS FROM users
    -> ;
+----------------------+------------------+------+-----+---------------------+----------------+
| Field                | Type             | Null | Key | Default             | Extra          |
+----------------------+------------------+------+-----+---------------------+----------------+
| user_id              | int(10) unsigned | NO   | PRI | NULL                | auto_increment |
| username             | varchar(128)     | NO   | MUL | NULL                |                |
| mail_host            | varchar(128)     | NO   |     | NULL                |                |
| created              | datetime         | NO   |     | 1000-01-01 00:00:00 |                |
| last_login           | datetime         | YES  |     | NULL                |                |
| failed_login         | datetime         | YES  |     | NULL                |                |
| failed_login_counter | int(10) unsigned | YES  |     | NULL                |                |
| language             | varchar(5)       | YES  |     | NULL                |                |
| preferences          | longtext         | YES  |     | NULL                |                |
+----------------------+------------------+------+-----+---------------------+----------------+
9 rows in set (0.006 sec)

MariaDB [roundcubemail]> SELECT user_id, username, mail_host, last_login FROM users
    -> ;
+---------+----------+----------------+---------------------+
| user_id | username | mail_host      | last_login          |
+---------+----------+----------------+---------------------+
|       1 | zintis   | vm3.zintis.ops | 2020-03-21 02:09:54 |
+---------+----------+----------------+---------------------+
1 row in set (0.001 sec)

MariaDB [roundcubemail]> 

A wiki on how to do the installation is available on github.com ,

I tried this in my mariadb database:

MariaDB [roundcubemail]> GRANT ALL ON  roundcubemail.* TO
       'roundcubemail'@'localhost'
       IDENTIFIED BY 'apalskubs';
Query OK, 0 rows affected (0.009 sec)

But as you can see it looks like it did NOT modify any rows. ? So who do I setup the correct id or ids with correct passwords?

The location of log files is configurable in config/defaults.inc.php under the line: $config['debug_level'] = 1; i.e /var/www/html/webmail/config

On vm1, talk of DATABASE setup:

• copied /var/www/html/webmail/config/config.inc.php.sample to config.inc.php (same directory)

  edits to this file are:

  • changing pass to actual password for roundcube

Welcome to the MariaDB monitor. Server version: 10.4.12-MariaDB MariaDB Server

Following the instructions from I checked for all files named .htaccess find . -name .htaccess -print ./var/www/html/webmail/temp/.htaccess ./var/www/html/webmail/public_html/.htaccess ./var/www/html/webmail/config/.htaccess ./var/www/html/webmail/logs/.htaccess ./var/www/html/webmail/.htaccess zintis@vm1/[1006]$

Ended up not changing any files named .htaccess (so far)

Looking at this output, gives you status of what needsto be fixed before installation is complete.\

My web installer gave me an error on page 2 Check DB config

DSN (write): NOT OK(SQLSTATE[HY000] [1045] Access denied for user 'roundcube'@'localhost' (using password: YES))

Make sure that the configured database exists and that the user has write privileges DSN: mysql://roundcube:pass@localhost/roundcubemail

To fix this, vi /var/www/html/webmail/config/config.inc.php and change pass to the actual password for roundcube.

$config['db_dsnw'] = 'mysql://roundcube:pass@localhost/roundcubemail';

After installing two additional php packages, php-intl and php-pear, sudo dnf install -y php-intl php-pear

I got an error when opening the webmail/installer web page as follows: Wrong 'session.auto_start' option value and it wasn't possible to set it to required value (Off). Check your PHP configuration (including php_adminflag).

I had to edit php.ini to change the auto_start to off (was on).

The following lines were added or changed by me:

$config['db_dsnw'] = 'mysql://roundcube:pass@localhost/roundcubemail'; to $config['db_dsnw'] = 'mysql://roundcube:apalskubs@localhost/roundcubemail';

$config['default_host'] = 'localhost'; to $config['default_host'] = 'localhost';

$config['smtp_user'] = '%u'; to $config['smtp_user'] = 'roundcube'; # have to add roundcube as a user for mail.

$config['smtp_user'] = '%p'; to $config['smtp_user'] = 'apalskubs'; # have to add roundcube as a user for mail.

$config['smtp_port'] = 587; to $config['smtp_port'] = 25;

/ SMTP password (if required) if you use %p as the password Roundcube / will use the current user's password for login

$config['smtp_pass'] = '%p'; to

/ provide an URL where a user can get support for this Roundcube installation / PLEASE DO NOT LINK TO THE ROUNDCUBE.NET WEBSITE HERE!

$config['support_url'] = ''; to

/ this key is used to encrypt the users imap password which is stored / in the session record (and the client cookie if remember password is enabled). / please provide a string of exactly 24 chars. / YOUR KEY MUST BE DIFFERENT THAN THE SAMPLE VALUE FOR SECURITY REASONS $config['des_key'] = 'rcmail-!24ByteDESkey*Str'; to

From INSTALL ? file ?

Note 1: 'password' is the master password for the roundcube user. It is strongly recommended you replace this with a more secure password. Please keep in mind: You need to specify this password later in 'config/db.inc.php'. No such file exists. The closest I got was config/config.inc.php

You only need to run certbot if you intend to run an internet certificate. In our lab we used self-signed local certificates. So don't bother with certbot.

on your smtp mail MTA (vm2) and MTA/MDA (dovecot on vm3) certbot –apache –agree-tos –redirect –hsts –staple-ocsp –email zintis@zintis.ops -d zintis.ops ================================= error on trying to install certbot on vm1 Complete! Creating virtual environment… Installing Python packages… Installation succeeded. Saving debug log to /var/log/letsencrypt/letsencrypt.log Error while running apachectl configtest.

AH00526: Syntax error on line 85 of /etc/httpd/conf.d/ssl.conf: SSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty

The apache plugin is not working; there may be problems with your existing configuration. The error was: MisconfigurationError("Error while running apachectl configtest.\n\nAH00526: Syntax error on line 85 of /etc/httpd/conf.d/ssl.conf:\nSSLCertificateFile: file '/etc/pki/tls/certs/localhost.crt' does not exist or is empty\n",) root@vm1/etc/httpd[1056]$

The setup files (see below) as well as the installer used port 25 for outgoing (smtp) to vm2. and port 143 for imap to vm3

outgoing smtp(25) did NOT have authentication setup, so in the installer webpage, just leave the password field blank. You should get an OK when testing smtp.

For the imap test, you must use your email user and password (to vm3).

Used in roundcube setup are the following files, all under the config dir in the roundcube root directory, which for me was /var/www/html/webmail/config

config.inc.php

defaults.inc.php

config.inc.php-from-installer-web # which I only used as an example, but