qmailadmin

Author: Inter7
Version: 1.2.16
Download the sources from http://sourceforge.net/projects/qmailadmin/files/
Combined patch v. 2022.04.01

qmailAdmin is a free software package that provides a web interface for managing a qmail system with virtual domains. It provides admin for adding/deleting users, Aliases, Forwards, Mailing lists and Autoresponders.

Combined patch details

qmailadmin-skin, a patch that I created during covid-19 spare time, provides a new responsive skin to the control panel. It modifies everything under the html dir and many .c files in order to adjust the html embedded into the source files. Added a stylesheet style.css in the images folder and a couple of png files for the qmail logo. It should be much easier to modify the qmailadmin's skin from now on.
A patch to call cracklib in order to check for the password strenght. This should avoid unsafe accounts created by domain administrators such as "test 123456".
A nice patch (thanks to Tony, original author unknown) which gets qmailadmin to have authentication failures logged. This makes possible to ban malicious IPs via fail2ban. It is required to create the log file /var/log/qma-auth.log initially and assign write priviledges to apache.
ezmlm-idx 7 compatibility patch (author unknown), which restores the compatibility with ezmlm-idx-7 (thanks to J.D. Trolinger for the advice).
a fix to the catchall account (thanks to Luca Franceschini).
another fix to autorespond.c to correct the way .qmail files are modified

Changelog

Apr 09, 2022
--enable-imageurl=/files is now --enable-imageurl=/qmailadmin/files (no need to have an alias on apache config). Added --disable-catchall, which is bad for spam. Tx Gabriel Torres
2022.04.01
-qmailadmin now logs to stderr when qma-auth.log can't be opened in write mode. It was returning a white screen without any error message nor on screen, nor on stderr.
2021.03.12
-patch cleanup
2020.09.02
-mod_user.html: cleaned the html as it was printing unneeded strings
2020.08.10
- mod_user.html: added the "value" attribute to the name/gecos input tag
- Makefile.in: added a line to install the css, as already done for Makefile.am
(tx Pablo Murillo)
2020.05.22
- mod_user.html: removed the "required" attribute on password field, to allow modifications in case of no password change

Setting up `cracklib`

Home page https://github.com/cracklib/cracklib
Download src and words list https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/

Cracklib is a library of functions providing a password complexity check against a word list. It compares the chosen password with the words contained in a database and if it is similar to one of them it returns a negative response.

Before installing qmailadmin we have to set up cracklib and then apply the patch. This patch upgrades the one of Inter7, which enforces qmailadmin only in the case of user modification but not when creating the user or simply when the user navigates the "change password" page.

Installing the sources

It's likely that you have the cracklib package and words list available in your Linux distribution repository. In this case proceed to the next step. If not, go ahead as follows in the normal way:

wget https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/cracklib-2.9.7.tar.bz2
tar xjf cracklib-2.9.7.tar.bz2
cd cracklib-2.9.7
./configure --with-default-dict=/usr/share/cracklib/pw_dict
make
make install
ldconfig

Installing the dictionary

man cracklib-format

Create the dictionary folder (the same as used in the configure command)

mkdir /usr/share/cracklib
cd /usr/share/cracklib

Download the words list

wget https://ftp.osuosl.org/pub/blfs/conglomeration/cracklib/cracklib-words-2.9.7.bz2
bunzip2 cracklib-words-2.9.7.bz2

Format and pack the dictionary into pw_dict.* files

cracklib-format cracklib-words-2.9.7 | cracklib-packer pw_dict

Now check that the cracklibs-words database has been created:

ls
cracklib-words-2.9.7  pw_dict.hwm  pw_dict.pwd  pw_dict.pwi

The database is made up of those three pw_dict.* compiled files. You can always enrich the database adding lines to the plain-text file and using a combination of cracklib-format/cracklib-packer as shown above.Take also note of where the database has been installed because we'll have to pass its path to qmailadmin's configure.

Testing `cracklib`

Let's do some test to see how cracklib works:

# cracklib-check  
roberto 
roberto: it is based on a dictionary word 
123456 
123456: it is too simplistic/systematic 
roberto928 
roberto928: it is based on a dictionary word 
robe99 
robe99: it is based on a dictionary word 
99robe 
99robe: it is based on a dictionary word 
robe@99 
robe@99: it is based on a dictionary word
Qwerty123 
Qwerty123: it is based on a dictionary word 
Qwerty!123 
Qwerty!123: it is based on a dictionary word
Rob&02f 
Rob&02f: OK
Rob&rto 
Rob&rto: OK
^C

To enable cracklib compile qmailadmin as

--enable-cracklib=/usr/share/cracklib/pw_dict

Installing `qmailadmin`

Please note that in the commands below you have to provide an autoreconf, as the original configure.in has been modified.

cd /usr/local/src
wget https://notes.sagredo.eu/files/qmail/tar/qmailadmin-1.2.16.tar.gz
wget https://notes.sagredo.eu/files/qmail/patches/qmailadmin/roberto-qmailadmin/roberto-qmailadmin-1.2.16.patch

touch /var/log/qma-auth.log
chgrp apache /var/log/qma-auth.log
chmod g+w /var/log/qma-auth.log

tar xzf qmailadmin-1.2.16.tar.gz
cd qmailadmin-1.2.16
patch -p1 < ../roberto-qmailadmin-1.2.16.patch
chown -R root.root .

autoreconf -f -i

QMAILROOT=/var/www/qmail
./configure \
  --enable-htmldir=${QMAILROOT} \
  --enable-cgibindir=${QMAILROOT}/cgi-bin \
  --enable-cgipath=/cgi-bin/qmailadmin \
  --enable-imagedir=${QMAILROOT}/qmailadmin/files \
  --enable-imageurl=/qmailadmin/files \
  --enable-htmllibdir=${QMAILROOT}/qmailadmin \
  --enable-qmaildir=/var/qmail \
  --enable-domain-autofill \
  --enable-vpopuser=vpopmail \
  --enable-vpopgroup=vchkpw \
  --enable-autoresponder-path=/usr/local/bin \
  --enable-ezmlmdir=/usr/local/bin/ezmlm \
  --enable-modify-quota \
  --disable-ezmlm-mysql \
  --disable-trivial-password \
  --disable-catchall \
  --enable-cracklib=/usr/share/cracklib/pw_dict

Before compiling you may want to save the qmail logo png files into the "images" folder of your source directory:

cd images
wget https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/favicon-16x16.png
wget https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/favicon-32x32.png
wget https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/logo.png
wget https://notes.sagredo.eu/files/qmail/patches/qmailadmin/skin/img/logo_big.png

Then compile and install as usual:

cd ..
make
make install-strip

This installs qmailadmin in /var/www/qmail.

Apache virtual host

Define QMAILROOT /var/www/qmail
Define LOGDIR    /var/log/apache2

<VirtualHost *:443>
        ServerName yourdomain.net
        DocumentRoot ${QMAILROOT}
        ScriptAlias /cgi-bin/ ${QMAILROOT}/cgi-bin/
        ErrorLog  ${LOGDIR}/qmailadmin_error.log
        CustomLog ${LOGDIR}/qmailadmin_access.log common
        <Directory ${QMAILROOT}>
            Require all granted
            AllowOverride None
        </Directory>
        <Directory ${QMAILROOT}/cgi-bin>
            AllowOverride None
            Options ExecCGI
            Require all granted
        </Directory>

        <Directory ${QMAILROOT}/qmailadmin/files>
            Require all granted
        </Directory>
</VirtualHost>

Now browse to https://yourdomain.net/cgi-bin/qmailadmin and login as postmaster.

ezmlm-idx

Add-ons

add a comment

Comments

Missing suid and sgid

yasuo June 8, 2022 10:42

I've got file permission error after successful login. I had to suid/sgid /cgi-bin/qmailadmin so that qmailadmin binary can read/write /var/vpopmail/domain contents.

qmailadmin

Combined patch details

Changelog

Setting up cracklib

Installing the sources

Installing the dictionary

Testing cracklib

Installing qmailadmin

Apache virtual host

Comments

qmail notes

Other contents

Recent comments

See also...

Recent posts

Setting up `cracklib`

Testing `cracklib`

Installing `qmailadmin`