Author |
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 28 September 2009 at 6:50am | IP Logged
|
|
|
Hello !
I have to setup the AL free version for a internal mail system (if this is ok). Running in debug mode i can see, that in PHP version the
<param name="mail_inc_pass">
Contains the hostadress instead of users password. Whats wrong ?
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 28 September 2009 at 7:50am | IP Logged
|
|
|
That's really strange. We've just re-tested it, everything works fine. Please make sure that you've specified correct data in your settings.
BTW, we don't provide free support for Lite version of AfterLogic WebMail. However, you may provide us with your settings.xml file, we'll take a look at settings of your login form.
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 28 September 2009 at 8:35am | IP Logged
|
|
|
Hmm i just deleted this system because i found all information is stored outside root accessable in these xml files password for admin and mysql ?
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 28 September 2009 at 8:56am | IP Logged
|
|
|
Yes, the passwords are stored in plain text, but that's secure as the data folder and all its subfolders are protected with .htaccess file which doesn't allow accessing those files from web. Moreover, this is mentioned in the installation instructions.
Best regards,
Andrew
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 28 September 2009 at 8:59am | IP Logged
|
|
|
Also, for even better security, it's possible to move the settings and all data in that folder outside of web folder on your server.
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 28 September 2009 at 9:11am | IP Logged
|
|
|
OK well i try install it again. htaccess may not secure enough. Btw. can you check what happen when password contains host instead pw ?
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 29 September 2009 at 1:21am | IP Logged
|
|
|
OK, i can see following problems:
1) I installed the PRO trial without key, this seems top be the first problem.
2) After installing i encounter wrong login from IP 186.9.6.150 also as PASS:
09/29/09 10:07:02 ID 2556 - POP3 connection to server...
09/29/09 10:07:02 ID 2556 - USER p.laengle\0D\0A
09/29/09 10:07:02 ID 2556 - +OK valid\0D\0A
09/29/09 10:07:02 ID 2556 - PASS 186.9.6.150\0D\0A
09/29/09 10:07:02 ID 2556 - -ERR Invalid Command\0D\0A
Why is someone trying to login from this IP adresse right after installation and why is always the ip in password field ?
3) The design and functionality is smooth and worth buying but not with these strange behaviors.
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 29 September 2009 at 3:20am | IP Logged
|
|
|
Quote:
1) I installed the PRO trial without key, this seems top be the first problem. |
|
|
Do you need a trial key? If yes, you can request it from us through Helpdesk.
Quote:
2) After installing i encounter wrong login from IP 186.9.6.150 also as PASS:
Why is someone trying to login from this IP adresse right after installation and why is always the ip in password field ? |
|
|
We have no idea why that happens. We've never heard about such issue before. This has never happened for hundreds of our clients and thousands of their users.
Who.is states that's someone from Rambla Republica de Mexico 6125. Does this info explain you anything?
If you think this caused by strange behavior of our product, please try to install it on another machine and check if the issue happens there.
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 29 September 2009 at 3:55am | IP Logged
|
|
|
The install process is fine but the ip trying to login into the account came right up after installing it ?! Very strange.
The problem with wrong password field is still there. The server is an W32 not NIX system ?!
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 29 September 2009 at 4:01am | IP Logged
|
|
|
Quote:
The install process is fine but the ip trying to login into the account came right up after installing it ?! Very strange. |
|
|
We have no idea why that happens. We've never heard about such issue before. This has never happened for hundreds of our clients and thousands of their users.
Who.is states that's someone from Rambla Republica de Mexico 6125. Does this info explain you anything?
If you think this caused by strange behavior of our product, please try to install it on another machine and check if the issue happens there.
Quote:
The problem with wrong password field is still there. The server is an W32 not NIX system ?! |
|
|
Do you mean if you try to log in, you'll get the host in the password field? If so, please provide us with URL pointing to your WebMail Pro installation, a test account on your mail server and password to AdminPanel, we'll be able to investigate it directly.
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 29 September 2009 at 4:19am | IP Logged
|
|
|
Hmm i just disabled the direct mode. Don't know why but now it works. I will try the system for a month and let my chiefs decide to use it or not. Thanks for help.
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 29 September 2009 at 4:25am | IP Logged
|
|
|
Do you mean disabling the direct mode resolves the issue with host in the password field?
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 29 September 2009 at 5:41am | IP Logged
|
|
|
Hello - yes it seems so.
Another problem - it fetches only the first 10 mails from server and marks them as read. Is it possible to force fetching pop again (there are about 300 on server left but they wont be fetched).
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 29 September 2009 at 6:19am | IP Logged
|
|
|
1. Please log into your account the issue with 10 messages happens on.
2. Enable logging in AdminPanel / WebMail / Debug Settings / Enable Logging.
3. Press "Check Mail" button in your account (i.e. reproduce the issue).
4. Disable logging.
5. Provide us with the log file for examination.
It's important to make sure the log file doesn't contain irrelevant records, that's why we recommend enabling it, reproducing the issue and immediately disabling.
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 29 September 2009 at 6:41am | IP Logged
|
|
|
Hmm youre right - server responds only with:
[15:39:38.549] POP3 >>: STAT
[15:39:38.549] POP3 <<: +OK 10 259274
[15:39:38.549] POP3 >>: UIDL
[15:39:38.550] POP3 <<: +OK Unique-id listing follows
[15:39:38.550] POP3 <<: 1 350C24
[15:39:38.550] POP3 <<: 2 350C22
[15:39:38.550] POP3 <<: 3 350C21
[15:39:38.551] POP3 <<: 4 350C20
[15:39:38.551] POP3 <<: 5 350AC2
[15:39:38.551] POP3 <<: 6 350C1F
[15:39:38.551] POP3 <<: 7 350C1E
[15:39:38.551] POP3 <<: 8 350C1D
[15:39:38.552] POP3 <<: 9 350C1C
[15:39:38.552] POP3 <<: 10 350B25
The box has 355 mails at all but they seems to be fetched from complete different days.
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 29 September 2009 at 6:44am | IP Logged
|
|
|
OK sorry ; misconfig of server - i limited to 10 messages per session. Sry.
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 02 October 2009 at 12:29am | IP Logged
|
|
|
Hello again !
I encounter the following problem:
The user can only collect mail if username / password is the same as SMTP username / password otherwise i get an error that authentication is wrong ?!
Can this happen because of login type ?
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 02 October 2009 at 4:02am | IP Logged
|
|
|
Yes, that's correct, but the credentials should match with ones on POP3/IMAP server (depends on account type), not SMTP. What's wrong with this?
If you create the following Gmail account:
user: mytestaccount@gmail.com
password: mypassword
You'll be able to use these credentials to log into Gmail's web interface as well as through Gmail's POP3/IMAP. The same for AfterLogic WebMail.
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 02 October 2009 at 7:14am | IP Logged
|
|
|
I tought, that SMTP user/login is used to fetch/send mails and user/login is used by database to auth user in webmail.
Another suggestion - the option to fetch the mails right after login can cause the user to wait a while before accessing the system (when user has a lot of mails). The other option is let the user login first then he has to fetch manually.
So is there a setting to automatic fetch after login without pressing Check Mailbox ?
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 02 October 2009 at 10:34am | IP Logged
|
|
|
Btw. it seems that there is a bug introduced in PHP 5.2.11 (on W2K3) which breaks SMTP classes. See http://bugs.php.net/bug.php?id=49706
So may this breaks also some functionality here.
|
Back to Top |
|
|
Andrew AfterLogic Support
Joined: 28 April 2006 Location: United States
Online Status: Offline Posts: 1189
|
Posted: 05 October 2009 at 12:06am | IP Logged
|
|
|
Quote:
I tought, that SMTP user/login is used to fetch/send mails and user/login is used by database to auth user in webmail. |
|
|
Having two separate passwords might confuse users.
Quote:
So is there a setting to automatic fetch after login without pressing Check Mailbox ? |
|
|
This is not so simple as it looks. Because requests within the same web session (from the same client) are processed by web server consecutively, automatic mail check may significantly degrade UI response time.
Just imagine, you're filtering your mailbox (briefly viewing each message, deleting some messages) and automatic mail check starts. You'll be not able to continue filtering until it gets completed. This'd be annoying.
However, we're considering implementing this option in future versions of the product.
Quote:
Btw. it seems that there is a bug introduced in PHP 5.2.11 (on W2K3) which breaks SMTP classes. See http://bugs.php.net/bug.php?id=49706
So may this breaks also some functionality here. |
|
|
Thanks for the info, we'll check it.
Best regards,
Andrew
|
Back to Top |
|
|
petesky Newbie
Joined: 28 September 2009 Location: Austria
Online Status: Offline Posts: 23
|
Posted: 22 October 2009 at 12:44am | IP Logged
|
|
|
As for your notice - i just buyed the 10 users PHP version (order xxxx575). Thx for help - software works so far with PHP 5.2.12 DEV.
|
Back to Top |
|
|