Webuzo System Application: Exim and Dovecot updated

Hi,

We are glad to announce that we have added SSL/TLS as well as SMTP AUTH support for Exim and Dovecot.

By default the self-signed certificate generated by Webuzo will be used to configure SSL/TLS but if you are using any 3rd party or Let’s Encrypt certificate for Webuzo panel then that certificate will be used.

We have also enabled SMTP AUTH by default so that all accounts must verify themselves with the mail server before sending any emails.

You can refer this guide to configure your email account with Thunderbird:
https://www.webuzo.com/wiki/Email_Account_Mozilla_Thunderbird

And refer this link to configure your email account with Outlook:
https://www.webuzo.com/wiki/Email_Account_Outlook

We will be adding more guides in the coming weeks for Web-based email clients like: WebMail Lite, RoundCube and RainLoop

The Next release of Webuzo i.e 2.7.1 will include a GUI manager to configure certificates for Email SSL/TLS.

Let me know if you have any questions in the comment section, I will try to answer as many as I can.

Regards,
The Webuzo Team

Access Email Accounts using Roundcube on Webuzo

Overview

This guide provides a step by step tutorial to configure email accounts to work on Roundcube

Webuzo allows users to create email account for their domains by deploying the Email Server (Exim + Dovecot) by a click of a button. Exim and Dovecot can be installed from the Webuzo Enduser Panel >> Apps >> Utilities Category.

Quick Guide: http://www.webuzo.com/wiki/Install_System_Apps

Users can freely create as many email accounts required for the domains added to their Webuzo Panel.

Quick Guide: http://webuzo.com/wiki/Add_Email_Account

Webuzo provides SquirrelMail as the default Webmail to access emails of the accounts created from
the Webuzo Enduser Panel.

Quick Guide: http://webuzo.com/wiki/Access_Emails

Once you have created Email Accounts using the tutorials mentioned above.
Here is a stepwise guide to configure Roundcube for email accounts created using Webuzo.

Roundcube – Free webmail for the masses. Roundcube webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking.
Getting Started

Assumptions :

Dovecot and Exim installed on Webuzo. Restart the services for once.

Root > service exim restart
Root > service dovecot restart

Configuration Settings

=> Server Address : example.com (Domain Name)

=> POP3 PORT : 143 or 143 or 993

=> Connection Type : TLS or NONE or SSL

Email Account Details

=> Email Account : demo@example.com

=> Password : password
Steps

The following steps will guide you to configure Roundcube

1) Login to Webuzo Enduser Panel and navigate to Roundcube in the Mails Category.
Navigate to Roundcube

2) Click on the install steps and fill in the necessary details.
Navigate to Roundcube

3) Click on the Install button while Softaculous Webuzo will download and install Roundcube for you.

4) Access and Login to the Roundcube installation with the username password created earlier.
Navigate to Roundcube

5) That’s it. Enjoy emailing.

Hope the information was enough to help you configure Webuzo Emails on Roundcube.

Demo : http://demo.webuzo.com/enduser

Common Problems :

1) Temporary Connection Failure Confirm that the Dovecot and Exim Services are running on your server.

Since it is a temporary issue, a restart is recommended.

Restart your services from the Webuzo Enduser Panel >> Services Menu

Quick Guide : http://webuzo.com/wiki/Restart_services

Heartbleed Vulnerability fix on Webuzo

Heartbleed LogoThe Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).

The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.

This tutorial guide users to manually upgrade their OpenSSL installation.

Step 1) Find the architecture of your server
Root > uname -i

Step 2) Stop your webserver (Apache/Nginx/Lighttpd)
For Apache
Root > service httpd stop

Step 3) Remove and Create the OpenSSL directory to download the latest packages.
Root > rm -rf /var/softaculous/apps/openssl/
Root > mkdir /var/softaculous/apps/openssl/
Root > cd /var/softaculous/apps/openssl/

Download the openssl package as per your architecture.
For 32 bit machine (x86)
Root > wget http://files.webuzo.com/apps/openssl-x86.zip

For 64 bit machine (x86_64)
Root > wget http://files.webuzo.com/apps/openssl-x86_64.zip

Step 4) Unzip the archive
For 32 bit machine (x86)
Root > unzip openssl-x86.zip
Root > rm -rf openssl-x86.zip

For 64 bit machine (x86_64)
Root > unzip openssl-x86_64.zip
Root > rm -rf openssl-x86_64.zip

Step 5) Extract the archive on the existing openssl location
Root > cd /usr/local/apps
For 32 bit machine (x86)
Root > tar -zxvf /var/softaculous/apps/openssl/openssl-x86.tar.gz

For 64 bit machine (x86_64)
Root > tar -zxvf /var/softaculous/apps/openssl/openssl-x86_64.tar.gz

Step 6) Start the webserver(Apache/Nginx/Lighttpd)
For Apache
Root > service httpd start

Step 7) Confirm your OpenSSL version
Root > /usr/local/apps/bin/openssl version

Test your server for CVE-2014-0160 !!!
http://filippo.io/Heartbleed/

We will be launching a New version of Webuzo soon which will automatically fix this issue !!!

If you still face any issues, please open a support ticket with the root details of your server and access to your Webuzo Enduser Panel, we will resolve your issues.

Support : https://www.softaculous.com/support/open.php?

Source : http://heartbleed.com/

Fixing the “Bad request: The IMAP server is reporting that plain text logins are disabled. ” error in Webuzo SquirrelMail

Squirrel MailWebuzo is ported with SquirrelMail as the default web-client to access emails.
SquirrelMail is a standards-based webmail package written in PHP. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 (with no JavaScript required) for maximum compatibility across browsers. It has very few requirements and is very easy to configure and install. SquirrelMail has all the functionality you would want from an email client, including strong MIME support, address books, and folder manipulation.

It is deployed along with Exim – the SMTP Email Server, which can be installed by a click from the Webuzo Enduser Panel >> Apps >> Utilities Category

Guide : http://www.webuzo.com/wiki/Install_System_Apps

Accessing SquirrelMail is as simple as a pie with Webuzo.
Guide : http://webuzo.com/wiki/Access_Emails

Issue # 1
Error : Bad request: The IMAP server is reporting that plain text logins are disabled.
For instance you may face an error as follows while logging in to the web-client, which is forced SSL authentication.

Squirrel Mail Error

Fix for the above issue

Step 1)
Open the Dovecot Auth configuration using your favorite editor
1) SSL

vi /etc/dovecot/conf.d/10-auth.conf

Replace the line (Comment the line !!!)
ssl = yes

by

#ssl = yes

Save the above file !!!

Step 2)

Open the Dovecot SSL configuration using your favorite editor
1) Turn OFF SSL

vi /etc/dovecot/conf.d/10-ssl.conf

Replace the line
ssl = required

by

ssl = no

Save the above file !!!

Step 3)
Restart the Dovecot Service

service dovecot restart

That’s it !!! Simple enough !!!

Similar SquirrelMail issues :
http://www.webuzo.com/blog/general/webuzo-email-server-fix-for-mozilla-thunderbird-and-outlook-1982.html

Demo :
Admin Panel : http://demo.webuzo.com/
Enduser Panel : http://demo.webuzo.com/enduser/

Support : https://www.softaculous.com/support/open.php?

WordPress + Lighttpd on Webuzo

Lighttpd Web ServerWordPress is web software you can use to create a beautiful website or blog. We like to say that WordPress is both free and priceless at the same time.

Lighttpd Web ServerA single WordPress consumes all the memory on a VPS as in and poorly managed Apache Setup. For this reason WordPress can be deployed easily using Lighttpd. With “lighty” the WordPress installation on a VPS works like a charm. Running multiple sites on a single VPS with just 1 GB RAM, what more can you expect from “Lighty”.

Lighttpd does not use a .htaccess file like Apache does, so you can consider writing your own rewrite rules and include them into the Lighttpd configuration and load all the necessary module to suit the requirements for the site. Webuzo Lighttpd Setup is pre-loaded to have WordPress up and running thus fulfilling the basic requirements.

Webuzo Application Manager provides the complete package to setup the LLMP (Linux, Lighttpd, MySQL and PHP ) Stack and WordPress just by a click of a button. The default installation of Webuzo serves Apache as the default Webserver.

Quick guide to have LLMP setup by default.

LLMP can be installed by a click for the Webuzo Enduser Panel as well as explained in the following tutorial.

Webuzo further allows users to switch among webservers (Apache / NGINX / Lighttpd) at any point of time by a click from the Webuzo Enduser Panel

Getting Started
1) Install LLMP from the Webuzo Enduser Panel >> Apps >> Stacks
Webuzo LLMP Install

2) Confirm whether the services are running from the Webuzo Enduser Panel >> Services Menu
Webuzo Lighttpd Service

3) If you are unable to find Lighttpd in the services and Apache/NGINX instead, you require to switch to Lighttpd as the webserver.
Guide : http://webuzo.com/wiki/System_Utilities
Webuzo Switch Lighttpd

4) Well !!! Time to install WordPress.
Find WordPress in the Webuzo Enduser Panel >> PHP >> Blogs >> WordPress
Fill in the required details and hit Enter
Webuzo Install WordPress

5) Access the WordPress Admin / Enduser Site

WordPress Admin Site :

Wordpress Admin Site

WordPress Enduser Site :

Wordpress Site

Hope that was simple !!!

Webuzo DEMO : http://demo.webuzo.com/enduser/

Note : Users can further configure other modules to improvise the performance of the site.
LIGHTTPD CONF FILE LOCATION : /usr/local/apps/lighttpd/etc/lighttpd.conf

Sources :
http://antesarkkinen.com/blog/wordpress-with-lighttpd-pretty-url-permalinks-and-jetpack/

http://wordpress.org/