Submitted by izoox on Mon, 04/11/2011 - 11:16
Why can't I access user's passwords after I restore a backup to a new system? This normally wasn't an issue except I removed all users .usermin folder from their home directory because I changed the usermin user defaults and wanted those settings to be applied globally. I don't have anyone but domain administrators using usermin to manage their user's spam folders etc, and they user the 'Login to Usermin' button but now when we try to click that button it asks for the imap password since I removed all the .usermin folders. Is there anything I can do?
Status:
Active
Comments
Submitted by JamieCameron on Mon, 04/11/2011 - 12:45 Comment #1
The IMAP passwords are stored in the .usermin folders - if you deleted those, then the passwords are lost.
Do you still have a backup of those directories?
Submitted by izoox on Tue, 04/12/2011 - 10:48 Comment #2
I do. Where in the .usermin folder are the passwords stored?
Submitted by izoox on Tue, 04/12/2011 - 10:58 Comment #3
I found that in the inbox.imap file. Why doesn't the 'Show Password' link show after restoring them?
Submitted by JamieCameron on Tue, 04/12/2011 - 13:16 Comment #4
The "Show Password" link gets the password from fies under /etc/webmin/virtual-server/plainpass , one for each domain named after its unique ID.
Are those files perhaps missing on your system? They should be included in backups ..
Submitted by izoox on Tue, 04/12/2011 - 16:17 Comment #5
They might be missing. I used the virtualmin backup system when I migrated the sites to the new server.
Submitted by JamieCameron on Tue, 04/12/2011 - 16:40 Comment #6
When you did the backup, was Virtualmin 3.84 being used on both the old and new systems?
And did you have all features selected to be included in the backup (which is the default) ?
Submitted by izoox on Tue, 04/12/2011 - 16:42 Comment #7
They should have both been the same version, but it was a while ago so it likely wasn't 3.84.
Submitted by JamieCameron on Tue, 04/12/2011 - 19:01 Comment #8
How long ago? There was a bug (now fixed) at one point that causes plaintext passwords to be excluded from backups ..
Submitted by izoox on Wed, 04/13/2011 - 11:57 Comment #9
It was a couple months ago I believe. I am not sure of the exact date. It's not that big of a deal. If they update their password, will it show that link again?
Submitted by JamieCameron on Wed, 04/13/2011 - 13:33 Comment #10
Yes, if they change their password Virtualmin will store the new one.
Did you happen to check if any file existed under
/etc/webmin/virtual-server/plainpass, and if so did they contain usernames and passwords?Submitted by izoox on Wed, 04/13/2011 - 16:49 Comment #11
They do. I don't know if that particular domain had one or how they are organized though.
Submitted by JamieCameron on Wed, 04/13/2011 - 16:53 Comment #12
The files are named based on each domain's unique numeric ID. You can find this for a domain with a command like :
virtualmin list-domains --domain whatever.com --id-onlySubmitted by izoox on Wed, 04/13/2011 - 16:55 Comment #13
Yeah, the particular domain only has one user in it. So when they update or add users, this file will get updated?
Submitted by JamieCameron on Wed, 04/13/2011 - 20:23 Comment #14
Yes, that is correct.
So for the user already in the file, can you see his password OK?
Submitted by izoox on Thu, 04/14/2011 - 10:22 Comment #15
Yeah, the other user checks out ok.