Garak: Created page with " Category:Bugweis {| align="right" | TOC |} '''How to set up Roundcube (en)'''

The best free webmail interface out..."

2021-05-22T16:21:45Z

Created page with " Category:Bugweis  {| align="right" | __TOC__ |} '''How to set up Roundcube (en)'''<br><br> The best free webmail interface out..."

New page

[[Category:Bugweis]]

{| align="right"
| __TOC__
|}
'''How to set up Roundcube (en)'''<br><br>
The best free webmail interface out there at the moment is RoundCube. Download the latest version from http://roundcube.net/download and extract the contents to the <code>/usr/share</code> directory. Change owner and permissions using the following commands:

<pre>
chown -R root:www-data /usr/share/roundcube
find /usr/share/roundcube -type f -exec chmod 640 {} \;
find /usr/share/roundcube -type d -exec chmod 750 {} \;
chmod 770 /usr/share/roundcube/logs
chmod 770 /usr/share/roundcube/temp
</pre>

Also create a new directory called <code>roundcube</code> under the <code>/var/log</code> directory. It needs to be writable by Apache.

<pre>
sudo mkdir /var/log/roundcube
sudo chown www-data:adm /var/log/roundcube
sudo chmod 750 /var/log/roundcube
</pre>

Because we want the communication between user and server to be secure, we'll use a HTTPS virtual host. Let's start by preparing a self-signed SSL certificate.

<pre>
cd /etc/ssl
openssl genrsa -des3 -rand /etc/hosts -out ./private/{hostname}.key 1024
chmod 600 ./private/{hostname}.key
openssl req -new -key ./private/{hostname}.key -out ./private/{hostname}.csr
</pre>

You'll be asked to provide details for the new certificate. These details will be available for anybody to view so be careful not to disclose any sensitive information. The Common Name should always be the exact host name of the webmail system (e.g. mail.moredigital.com). Leave the challenge password empty. Now we need to self-sign the certificate and strip the passphrase.

<pre>
openssl x509 -req -days 3650 -in ./private/{hostname}.csr -signkey ./private/{hostname}.key -out ./certs/{hostname}.crt
openssl rsa -in ./private/{hostname}.key -out ./private/{hostname}.key.unencrypted
mv -f ./private/{hostname}.key.unencrypted ./private/{hostname}.key
chmod 600 ./private/{hostname}.key
rm ./private/{hostname}.csr
</pre>

You should be aware that web browsers won't treat these certificated as trusted and will display a warning. But that's not a big problem for us as our primary goal is to secure the connection and not to validate identity of the server.

<pre>
<VirtualHost 85.118.235.162:80>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</VirtualHost>

<VirtualHost 85.118.235.162:443>
ServerName mail.hostname.tld
DocumentRoot /usr/share/roundcubemail-0.3.1
ServerAdmin admin@hostname.tld

ErrorLog /var/log/roundcube/apache-error.log
CustomLog /var/log/roundcube/apache-access.log combined

# SSL
SSLEngine On
SSLCertificateFile /etc/ssl/certs/{hostname}.crt
SSLCertificateKeyFile /etc/ssl/private/{hostname}.key
</VirtualHost>
</pre>

Roundcube comes with a user friendly installation interface. You can access it by pointing your browser to the /installer sub-path of your newly setup virtual host. Follow the instructions and after your configuration is ready and has been tested, tweak roundcube config file to force HTTPS protocol.

<pre>
$rcmail_config['force_https'] = TRUE;
</pre>

Now you should modify /usr/share/roundcube/config/main.inc.php:

<pre>
$rcmail_config['default_host'] = 'tls://%n';
$rcmail_config['smtp_server'] = 'tls://%h';
$rcmail_config['mail_domain'] = '%d'
</pre>

== Add LDAP Address Book ==

You must install php5-ldap:

<pre>
aptitude install php5-ldap
</pre>

You must uncomment "ADDRESSBOOK SETTINGS" in /usr/share/roundcube/config/main.inc.php and modify it:

<pre>
$rcmail_config['address_book_type'] = 'ldap';
'name' => 'name',
'hosts' => array('Hostname'),
'port' => Port number,
'base_dn' => 'Base DN',
'bind_dn' => 'Bind DN',
'bind_pass' => 'password',
</pre>

Done!

ZhoubaWiki:HowToSetupRoundcube - Revision history

Garak: Created page with " Category:Bugweis {| align="right" | __TOC__ |} '''How to set up Roundcube (en)''' The best free webmail interface out..."

Garak: Created page with " Category:Bugweis {| align="right" | TOC |} '''How to set up Roundcube (en)'''

The best free webmail interface out..."