qmailadmin

Author: Inter7
Version: 1.2.16
Download the sources from http://sourceforge.net/projects/qmailadmin/files/
Combined patch v. 20200902

qmailAdmin is a free software package that provides a web interface for managing a qmail system with virtual domains. It provides admin for adding/deleting users, Aliases, Forwards, Mailing lists and Autoresponders.

Combined patch details

qmailadmin-skin, a patch that I created during covid-19 spare time, provides a new responsive skin to the control panel. It modifies everything under the html dir and many .c files in order to adjust the html embedded into the source files. Added a stylesheet style.css in the images folder and a couple of png files for the qmail logo.
patch to call cracklib in order to check for the password strenght. This should avoid unsafe accounts created by domain administrators such as "test 123456".
A patch (thanks to Tony, original author unknown) which gets qmailadmin to have authentication failures logged. This makes possibile to ban malicious IPs via fail2ban. It is required to create the log file /var/log/qma-auth.log initially and assign write priviledges to apache.
ezmlm-idx 7 compatibility patch (author unknown), which restores the compatibility with ezmlm-idx-7 (thanks to J.D. Trolinger for the advice).
a fix to the catchall account (thanks to Luca Franceschini).
another fix to autorespond.c to correct the way .qmail files are modified

Changelog

2020.09.02
-mod_user.html: cleaned the html as it was printing unneeded strings
2020.08.10
- mod_user.html: added the "value" attribute to the name/gecos input tag
- Makefile.in: added a line to install the css, as already done for Makefile.am
(tx Pablo Murillo)
2020.05.22
- mod_user.html: removed the "required" attribute on password field, to allow modifications in case of no password change

Setting up `cracklib`

Home page https://github.com/cracklib/cracklib
Download src and words list https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/

Cracklib is a library of functions providing a password complexity check against a word list. It compares the chosen password with the words contained in a database and if it is similar to one of them it outputs a negative response.

Before installing qmailadmin we have to set up cracklib and then apply the patch. This patch upgrades the one of Inter7, which enforced qmailadmin only in the case of user modification but not when creating the user or simply when the user navigates the "change password" page.

Installing the sources

It's likely that you have the cracklib package and words list available in your Linux distribution repository. In this case proceed to the next step. If not, go ahead as follows in the normal way:

wget https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/cracklib-2.9.7.tar.bz2
tar xjf cracklib-2.9.7.tar.bz2
cd cracklib-2.9.7
./configure --with-default-dict=/usr/share/cracklib/pw_dict
make
make install

Installing the dictionary

man cracklib-format

# Create the dictionary folder (the same as used in the configure command)
mkdir /usr/share/cracklib
cd /usr/share/cracklib
# download the words list
wget https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/cracklib-words-2.9.7.bz2
bunzip2 cracklib-words-2.9.7.bz2
# format and pack the dictionary into pw_dict.* files
cracklib-format cracklib-words-2.9.7 | cracklib-packer pw_dict

Now check that the cracklibs-words database has been created:

ls
cracklib-words-2.9.7  pw_dict.hwm  pw_dict.pwd  pw_dict.pwi

The database is made up of those three pw_dict.* compiled files. You can always enrich the database adding lines to the plain-text file and using a combination of cracklib-format/cracklib-packer as shown above.Take also note of where the database has been installed because we'll have to pass its path to qmailadmin's configure.

Testing `cracklib`

Let's do some test to see how cracklib works:

# cracklib-check  
roberto 
roberto: it is based on a dictionary word 
123456 
123456: it is too simplistic/systematic 
roberto928 
roberto928: it is based on a dictionary word 
robe99 
robe99: it is based on a dictionary word 
99robe 
99robe: it is based on a dictionary word 
robe@99 
robe@99: it is based on a dictionary word
Qwerty123 
Qwerty123: it is based on a dictionary word 
Qwerty!123 
Qwerty!123: it is based on a dictionary word
Rob&02f 
Rob&02f: OK
Rob&rto 
Rob&rto: OK
^C

To enable cracklib compile qmailadmin as

--enable-cracklib=/usr/share/cracklib/pw_dict

When using cracklib as a standalone patch you have to provide a combination of aclocal/automake/autoconf in order to rebuild the configure file. My combined patch already have the configure file rebuilt.

Installing `qmailadmin`

cd /usr/local/src
wget https://notes.sagredo.eu/files/qmail/tar/qmailadmin-1.2.16.tar.gz
wget https://notes.sagredo.eu/files/qmail/patches/qmailadmin/roberto-qmailadmin/roberto-qmailadmin-1.2.16_20200902.patch

touch /var/log/qma-auth.log
chgrp apache /var/log/qma-auth.log
chmod g+w /var/log/qma-auth.log

tar xzf qmailadmin-1.2.16.tar.gz
cd qmailadmin-1.2.16
patch -p1 < ../roberto-qmailadmin-1.2.16_20200902.patch
chown -R root.root .

QMAILROOT=/var/www/qmail
./configure \
  --enable-htmldir=${QMAILROOT} \
  --enable-cgibindir=${QMAILROOT}/cgi-bin \
  --enable-cgipath=/cgi-bin/qmailadmin \
  --enable-imagedir=${QMAILROOT}/qmailadmin/files \
  --enable-imageurl=/files \
  --enable-htmllibdir=${QMAILROOT}/qmailadmin \
  --enable-qmaildir=/var/qmail \
  --enable-domain-autofill \
  --enable-vpopuser=vpopmail \
  --enable-vpopgroup=vchkpw \
  --enable-autoresponder-path=/usr/local/bin \
  --enable-ezmlmdir=/usr/local/bin/ezmlm \
  --enable-modify-quota \
  --disable-ezmlm-mysql \
  --disable-trivial-password \
  --enable-cracklib=/usr/share/cracklib/pw_dict

Before compiling you may want to save the qmail logo png files into the "images" folder of your source directory:

cd images
wget https://notes.sagredo.eu/files/qmail//patches//qmailadmin//skin//img/favicon-16x16.png
wget https://notes.sagredo.eu/files/qmail//patches//qmailadmin//skin//img/favicon-32x32.png
wget https://notes.sagredo.eu/files/qmail//patches//qmailadmin//skin//img/logo.png
wget https://notes.sagredo.eu/files/qmail//patches//qmailadmin//skin//img/logo_big.png

Then compile and install as usual:

cd ..
make

If you get errors like this

/bin/bash: aclocal-1.15: command not found

try to provide (tx Gabriel Torres)

autoreconf -f -i

Install:

make install-strip

This installs qmailadmin in /var/www/qmail.

Apache virtual host

Define QMAILROOT /var/www/qmail
Define LOGDIR    /var/log/apache

<VirtualHost *:443>
        ServerName yourdomain.net
        DocumentRoot ${QMAILROOT}
        ScriptAlias /cgi-bin/ ${QMAILROOT}/cgi-bin/
        ErrorLog  ${LOGDIR}/qmailadmin_error.log
        CustomLog ${LOGDIR}/qmailadmin_access.log common
        <Directory ${QMAILROOT}>
            Require all granted
            AllowOverride None
        </Directory>
        <Directory ${QMAILROOT}/cgi-bin>
            AllowOverride None
            Options ExecCGI
            Require all granted
        </Directory>

        Alias /files/ ${QMAILROOT}/qmailadmin/files/
        <Directory ${QMAILROOT}/qmailadmin/files>
            Require all granted
        </Directory>
</VirtualHost>

Now browse to https://yourdomain.net/cgi-bin/qmailadmin and login as postmaster.

ezmlm-idx

Add-ons

add a comment

Comments

qmailadmin patch error

Tony Fung September 2, 2020 11:28

Hi Roberto

The following error occurred when applying the patch "roberto-qmailadmin-1.2.16_20200901.patch":

patch: **** malformed patch at line 7496: diff -ruN ../../qmailadmin-1.2.16-original/html/setremotecatchall.html qmailadmin-1.2.16/html/setremotecatchall.html

Please correct it.

qmailadmin

Combined patch details

Changelog

Setting up cracklib

Installing the sources

Installing the dictionary

Testing cracklib

Installing qmailadmin

Apache virtual host

Comments

qmail notes

Other contents

Recent comments

See also...

Recent posts

Setting up `cracklib`

Testing `cracklib`

Installing `qmailadmin`