Can't change passwords

[Hubert Kah]

I use PostfixAdmin Version 3.0 beta3 (2.93) and when I want to change my password I get the same site with a read square without any text inside above the "Change your login password". PostfixAdmin don't change my password. I think that there is a problem with MySQL. I can't find any log that shows wich problem my PostfixAdmin has.

[Hubert Kah]

Has nobody any idea?!

[Christian Boltz]

There's more than one place where you can change your password, so please clarify what exactly you are doing:

• login as user / admin / superadmin?
• do you use "change password" or (if logged in as admin or superadmin) edit mailbox / edit admin?

Also check your apache error log - does it contain anything at the time you see the empty red square?

[Hubert Kah]

As admin I can change passwords. But when I log in as a simple user I can't. I use user e-mail address an passwortd. When I am logged in I klick "change password" I give the current password and in the next two lines the new one. If I klick the button to change my password the red square appears.

Apache log:
[Wed Mar 23 14:09:53.822125 2016] [:error] [pid 10927] [client 10.0.1.254:60234] Config::read(): attempt to read undefined config option "__LANG.$PALANG", returning null, referer: https://mail.server.name/users/password.php

Ok, there is the text missing which would be shown in the red square I think. But I don't think that that is the reason why my passworld will not be changed.

[Lewis Butler]

On Mar 23, 2016, at 7:33 AM, Hubert Kah hubertkah@users.sf.net wrote:

As admin I can change passwords. But when I log in as a simple user I can't. I use user e-mail address an passwortd. When I am logged in I klick "change password" I give the current password and in the next two lines the new one. If I klick the button to change my password the red square appears.

Are you running any script blockers or ad blockers on the postfixadmin page?

If so, don’t do that.

--
ɹןʇnqן
lbutler@covisp.net
303.219.0564

[Hubert Kah]

No, I don't. But also other browsers are showing that red square. (Firefox, Chrome, Internet Explorer).

[Hubert Kah]

And when I log in as root@domain.de I also can't change the password. But in this case the red square doesn't appears.

[Hubert Kah]

How does it works when I want to change a password? There have to be a config file or a script where is an "update" oder "alter" or something MySQL command like that.

[Christian Boltz]

I just checked, and can't reproduce the problem. However, I have a new question - which language are you using? (This problem might be language-specific.)

To answer the question how it works: users/password.php does some base validation and then uses MailboxHandler (model/MailboxHandler.php) to change the password.

[Hubert Kah]

I use the german translation.

I have set it back to english and tryed to change my password. But also in english the same error.

[Hubert Kah]

Has anybody an idea?

[Hubert Kah]

I had a look at the script MailboxHandler.php. It is a little bit huge and my experience in php is far away. What can I do that I can see if there is a problem with that script? I think that this script can't log in to the mysql database or something like that.

[Hubert Kah]

Apache error log:

Config::read(): attempt to read undefined config option "__LANG.$PALANG", returning null, referer: https://mail.server.name/users/password.php

Nothing else.

[Christian Boltz]

OK, so it tries to display an error message which doesn't exist (your error message indicates that it's over-escaped, we'll see).

I doubt this is a problem in MailboxHandler - otherwise other people would probably see this (including me, I'm also using the german translation).

Did you do any changes to $CONF['password_validation'] or other config options that involve translatable things?

If in doubt, please paste your config.local.php (without database password ;-) or, if you edited config.inc.php, a diff to the original file.

If this doesn't point to / solve the problem, we'll have to add some debugging code ;-)

[Hubert Kah]

config.local.php:

$CONF['configured'] = true;
$CONF['setup_password'] = 'xxxxxx';
$CONF['postfix_admin_url'] = 'http://mail.server.name';
$CONF['default_language'] = 'de';
$CONF['language_hook'] = 'de';
$CONF['database_type'] = 'mysqli';
$CONF['database_host'] = 'localhost';
$CONF['database_user'] = 'postfix';
$CONF['database_password'] = 'xxxxx';
$CONF['database_name'] = 'postfixdb';
$CONF['admin_email'] = 'root@server.name';
$CONF['smtp_server'] = 'localhost';
$CONF['smtp_port'] = '465';
$CONF['encrypt'] = 'md5crypt';
$CONF['authlib_default_flavor'] = 'md5raw';
$CONF['min_password_length'] = 8;
$CONF['generate_password'] = 'YES';
$CONF['show_password'] = 'YES';
$CONF['page_size'] = '10';
$CONF['default_aliases'] = array (
    'abuse' => 'adresse@server.name',
    'hostmaster' => 'adresse@server.name',
    'postmaster' => 'adresse@server.name',
    'webmaster' => 'adresse@server.name'
);
$CONF['password_validation'] = array(
    '/regular expression/' => '$PALANG key (optional: + parameter)',
    '/.{8}/'                => 'password_too_short 8',      # minimum length 8 characters
    '/([a-zA-Z].*){3}/'     => 'password_no_characters 3',  # must contain at least 3 characters
    '/([0-9].*){1}/'        => 'password_no_digits 1',      # must contain at least 1 digits
);
$CONF['domain_path'] = 'YES';
$CONF['domain_in_mailbox'] = 'NO';
$CONF['aliases'] = '0';
$CONF['mailboxes'] = '0';
$CONF['maxquota'] = '2000';
$CONF['quota'] = 'YES';
$CONF['quota_multiplier'] = '1048576';
$CONF['used_quota_table'] = 'YES';
$CONF['vacation'] = 'YES';
$CONF['vacation_domain'] = 'autoreply.server.name';
$CONF['vacation_control'] ='YES';
$CONF['vacation_control_admin'] = 'YES';
$CONF['vacation_choice_of_reply'] = array (
        0 => 'reply_every_mail',
        1 => 'reply_once',
        60*60*24*7 => 'reply_once_per_week',
);
$CONF['alias_control'] = 'YES';
$CONF['alias_control_admin'] = 'YES';
$CONF['special_alias_control'] = 'NO';
$CONF['alias_goto_limit'] = '0';
$CONF['alias_domain'] = 'YES';
$CONF['backup'] = 'YES';
$CONF['sendmail'] = 'YES';
$CONF['logging'] = 'YES';
$CONF['fetchmail'] = 'YES';
$CONF['fetchmail_extra_options'] = 'YES';
$CONF['user_footer_link'] = "http://www.server.name";
$CONF['show_footer_text'] = 'NO';
$CONF['footer_text'] = 'Dokumentation für E-Mail-Kopien';
$CONF['footer_link'] = 'https://mail.server.name/kopien.html';

[Christian Boltz]

$CONF['language_hook'] = 'de';

Do you really override translations with a language hook function? If not, leave this empty.

For your main problem - here we are:

$CONF['password_validation'] = array(
'/regular expression/' => '$PALANG key (optional: + parameter)',

You should comment out that line (prefix it with #).

It also explains why changing the password always fails - I'd guess your password does not contain "regular expression" ;-)

[Hubert Kah]

Oh, wow! That was the problem. It's solved!

Thank you very much!