qmailadmin

Author: Inter7
Version: 1.2.16
Download the sources from http://sourceforge.net/projects/qmailadmin/files/
Combined patch v. 2022.08.08
Changelog

qmailAdmin is a free software package that provides a web interface for managing a qmail system with virtual domains. It provides admin for adding/deleting users, Aliases, Forwards, Mailing lists and Autoresponders.

Combined patch details

qmailadmin-skin, a patch that I created during covid-19 spare time, provides a new responsive skin to the control panel. It modifies everything under the html dir and many .c files in order to adjust the html embedded into the source files. Added a stylesheet style.css in the images folder and a couple of png files for the qmail logo. It will be much easier to modify the qmailadmin's skin from now on.
A patch to call cracklib in order to check for the password strenght. This should avoid unsafe accounts created by domain administrators such as "test 123456".
A nice patch (thanks to Tony, original author unknown) which gets qmailadmin to have authentication failures logged. This makes possible to ban malicious IPs via fail2ban. It is required to create the log file /var/log/qma-auth.log initially and assign write priviledges to apache.
ezmlm-idx 7 compatibility patch (author unknown), which restores the compatibility with ezmlm-idx-7 (thanks to J.D. Trolinger for the advice).
a fix to the catchall account (thanks to Luca Franceschini).
another fix to autorespond.c to correct the way .qmail files are modified

Setting up `cracklib`

Home page https://github.com/cracklib/cracklib
Download src and words list https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/

Cracklib is a library of functions providing a password complexity check against a word list. It compares the chosen password with the words contained in a database and if it is similar to one of them it returns a negative response.

Before installing qmailadmin we have to set up cracklib and then apply the patch. This patch upgrades the one of Inter7, which enforces qmailadmin only in the case of user modification but not when creating the user or simply when the user navigates the "change password" page.

Installing the sources

It's likely that you have the cracklib package and words list available in your Linux distribution repository. In this case proceed to the next step.

A note for Debian users: the cracklib package has libpam-cracklib as dependence. But it turns out that libpam-cracklib replaces libpam-modules, which is a system library that should not be touched without a good reason. Therefore I suggest to install cracklib from source on /usr/local as explained above. I tested this solution a couple of times and it will not interfere with libpam.

To install cracklib from source go ahead as follows in the normal way:

wget https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/cracklib-2.9.8.tar.bz2
tar xjf cracklib-2.9.8.tar.bz2
cd cracklib-2.9.8
./configure --with-default-dict=/usr/share/cracklib/pw_dict
make
make install
ldconfig

Installing the dictionary

man cracklib-format

Create the dictionary folder (the same as used in the configure command)

mkdir /usr/share/cracklib
cd /usr/share/cracklib

Download the words list

wget https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/cracklib-words-2.9.8.bz2
bunzip2 cracklib-words-2.9.8.bz2

Format and pack the dictionary into pw_dict.* files

cracklib-format cracklib-words-2.9.8 | cracklib-packer pw_dict

Now check that the cracklibs-words database has been created:

ls
cracklib-words-2.9.8  pw_dict.hwm  pw_dict.pwd  pw_dict.pwi

The database is made up of those three pw_dict.* compiled files. You can always enrich the database adding lines to the plain-text file and using a combination of cracklib-format/cracklib-packer as shown above.Take also note of where the database has been installed because we'll have to pass its path to the qmailadmin's configure program.

Testing `cracklib`

Let's play a bit with cracklib:

# cracklib-check  
roberto 
roberto: it is based on a dictionary word 
123456 
123456: it is too simplistic/systematic 
roberto928 
roberto928: it is based on a dictionary word 
robe99 
robe99: it is based on a dictionary word 
99robe 
99robe: it is based on a dictionary word 
robe@99 
robe@99: it is based on a dictionary word
Qwerty123 
Qwerty123: it is based on a dictionary word 
Qwerty!123 
Qwerty!123: it is based on a dictionary word
Rob&02f 
Rob&02f: OK
Rob&rto 
Rob&rto: OK
^C

To enable cracklib compile qmailadmin as

--enable-cracklib=/usr/share/cracklib/pw_dict

Installing `qmailadmin`

Please note that in the commands below you have to provide an autoreconf, as the original configure.in has been modified.

touch /var/log/qma-auth.log
chgrp apache /var/log/qma-auth.log
chmod g+w /var/log/qma-auth.log

cd /usr/local/src
wget https://notes.sagredo.eu/files/qmail/tar/qmailadmin-1.2.16.tar.gz
wget https://notes.sagredo.eu/files/qmail/patches/qmailadmin/roberto-qmailadmin/roberto-qmailadmin-1.2.16.patch

tar xzf qmailadmin-1.2.16.tar.gz
cd qmailadmin-1.2.16
patch -p1 < ../roberto-qmailadmin-1.2.16.patch
chown -R root:root .

autoreconf -f -i

QMAILROOT=/var/www/qmail
./configure \
  --enable-htmldir=${QMAILROOT} \
  --enable-cgibindir=${QMAILROOT}/cgi-bin \
  --enable-cgipath=/cgi-bin/qmailadmin \
  --enable-imagedir=${QMAILROOT}/qmailadmin/files \
  --enable-imageurl=/qmailadmin/files \
  --enable-htmllibdir=${QMAILROOT}/qmailadmin \
  --enable-qmaildir=/var/qmail \
  --enable-domain-autofill \
  --enable-vpopuser=vpopmail \
  --enable-vpopgroup=vchkpw \
  --enable-autoresponder-path=/usr/local/bin \
  --enable-ezmlmdir=/usr/local/bin/ezmlm \
  --enable-modify-quota \
  --disable-ezmlm-mysql \
  --disable-trivial-password \
  --disable-catchall \
  --enable-cracklib=/usr/share/cracklib/pw_dict

Before compiling you may want to save the qmail logo png files into the "images" folder of your source directory:

wget -O images/favicon-16x16.png https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/favicon-16x16.png
wget -O images/favicon-32x32.png https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/favicon-32x32.png
wget -O images/logo.png          https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/logo.png
wget -O images/logo_big.png      https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/logo_big.png

Then compile and install as usual:

make
make install-strip

This installs qmailadmin in /var/www/qmail.

Apache virtual host

Define QMAILROOT /var/www/qmail
Define LOGDIR    /var/log/apache2

<VirtualHost *:443>
        ServerName mydomain.tld
        DocumentRoot ${QMAILROOT}
        ScriptAlias /cgi-bin/ ${QMAILROOT}/cgi-bin/
        ErrorLog  ${LOGDIR}/qmailadmin_error.log
        CustomLog ${LOGDIR}/qmailadmin_access.log common
        <Directory ${QMAILROOT}>
            Require all granted
            AllowOverride None
        </Directory>
        <Directory ${QMAILROOT}/cgi-bin>
            AllowOverride None
            Options ExecCGI
            Require all granted
        </Directory>
</VirtualHost>

Now browse to https://mydomain.tld/cgi-bin/qmailadmin and login as postmaster.

ezmlm-idx

Add-ons

add a comment

Comments

New cracklib version released: 2.9.8

Gabriel Torres September 10, 2022 17:25

Hi Roberto,

Just to let you know that the version 2.9.8 was released and you will need to update this page accordingly.

Cheers,

Gabriel.

qmailadmin

Combined patch details

Setting up cracklib

Installing the sources

Installing the dictionary

Testing cracklib

Installing qmailadmin

Apache virtual host

Comments

qmail notes

LXC scripts

Other contents

Recent comments

See also...

Recent posts

Setting up `cracklib`

Testing `cracklib`

Installing `qmailadmin`