No OneTemporary
Actions

Size

34 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/plugins/password/README b/plugins/password/README
	index 50f97995e..43f0e3494 100644
	--- a/plugins/password/README
	+++ b/plugins/password/README
	@@ -1,453 +1,469 @@
	-----------------------------------------------------------------------
	Password Plugin for Roundcube
	-----------------------------------------------------------------------
	Plugin that adds a possibility to change user password using many
	methods (drivers) via Settings/Password tab.
	-----------------------------------------------------------------------
	This program is free software: you can redistribute it and/or modify
	it under the terms of the GNU General Public License as published by
	the Free Software Foundation, either version 3 of the License, or
	(at your option) any later version.

	This program is distributed in the hope that it will be useful,
	but WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	GNU General Public License for more details.

	You should have received a copy of the GNU General Public License
	along with this program. If not, see http://www.gnu.org/licenses/.

	@author Aleksander Machniak <alec@alec.pl>
	@author <see driver files for driver authors>
	-----------------------------------------------------------------------

	1. Configuration
	2. Drivers
	2.1. Password Change Drivers
	2.1.1. Database (sql)
	2.1.2. Cyrus/SASL (sasl)
	2.1.3. Poppassd/Courierpassd (poppassd)
	2.1.4. LDAP (ldap)
	2.1.5. DirectAdmin Control Panel (directadmin)
	2.1.6. cPanel
	2.1.6.1. cPanel WHM (cpanel)
	2.1.6.2. cPanel Webmail (cpanel_webmail)
	2.1.7. XIMSS/Communigate (ximms)
	2.1.8. Virtualmin (virtualmin)
	2.1.9. hMailServer (hmail)
	2.1.10. PAM (pam)
	2.1.11. Chpasswd (chpasswd)
	2.1.12. LDAP - no PEAR (ldap_simple)
	2.1.13. XMail (xmail)
	2.1.14. Pw (pw_usermod)
	2.1.15. domainFACTORY (domainfactory)
	2.1.16. DBMail (dbmail)
	2.1.17. Expect (expect)
	2.1.18. Samba (smb)
	2.1.19. Vpopmail daemon (vpopmaild)
	2.1.20. Plesk (Plesk RPC-API)
	2.1.21. Kpasswd
	2.1.22. Modoboa
	2.1.23. LDAP - Password Modify Extended Operation (ldap_exop)
	2.2. Password Strength Drivers
	2.2.1. Zxcvbn
	+ 2.2.2. Have I been pwned? (pwned)
	3. Driver API
	4. Sudo setup


	1. Configuration
	----------------

	Copy config.inc.php.dist to config.inc.php and set the options as described
	within the file.


	2. Drivers
	----------


	2.1. Password Change Drivers
	----------------------------

	Password plugin supports many password change mechanisms which are
	handled by included drivers. Just pass driver name in 'password_driver' option.


	2.1.1. Database (sql)
	---------------------

	You can specify which database to connect by 'password_db_dsn' option and
	what SQL query to execute by 'password_query'. See config.inc.php.dist file for
	more info.

	Example implementations of an update_passwd function:

	- This is for use with LMS (http://lms.org.pl) database and postgres:

	CREATE OR REPLACE FUNCTION update_passwd(hash text, account text) RETURNS integer AS $$
	DECLARE
	res integer;
	BEGIN
	UPDATE passwd SET password = hash
	WHERE login = split_part(account, '@', 1)
	AND domainid = (SELECT id FROM domains WHERE name = split_part(account, '@', 2))
	RETURNING id INTO res;
	RETURN res;
	END;
	$$ LANGUAGE plpgsql SECURITY DEFINER;

	- This is for use with a SELECT update_passwd(%o,%c,%u) query
	Updates the password only when the old password matches the MD5 password
	in the database

	CREATE FUNCTION update_password (oldpass text, cryptpass text, user text) RETURNS text
	MODIFIES SQL DATA
	BEGIN
	DECLARE currentsalt varchar(20);
	DECLARE error text;
	SET error = 'incorrect current password';
	SELECT substring_index(substr(user.password,4),_latin1'$',1) INTO currentsalt FROM users WHERE username=user;
	SELECT '' INTO error FROM users WHERE username=user AND password=ENCRYPT(oldpass,currentsalt);
	UPDATE users SET password=cryptpass WHERE username=user AND password=ENCRYPT(oldpass,currentsalt);
	RETURN error;
	END

	Example SQL UPDATEs:

	- Plain text passwords:
	UPDATE users SET password=%p WHERE username=%u AND password=%o AND domain=%h LIMIT 1

	- Crypt text passwords:
	UPDATE users SET password=%c WHERE username=%u LIMIT 1

	- Use a MYSQL crypt function (*nix only) with random 8 character salt
	UPDATE users SET password=ENCRYPT(%p,concat(_utf8'$1$',right(md5(rand()),8),_utf8'$')) WHERE username=%u LIMIT 1

	- MD5 stored passwords:
	UPDATE users SET password=MD5(%p) WHERE username=%u AND password=MD5(%o) LIMIT 1


	2.1.2. Cyrus/SASL (sasl)
	------------------------

	Cyrus SASL database authentication allows your Cyrus+Roundcube
	installation to host mail users without requiring a Unix Shell account!

	This driver only covers the "sasldb" case when using Cyrus SASL. Kerberos
	and PAM authentication mechanisms will require other techniques to enable
	user password manipulations.

	Cyrus SASL includes a shell utility called "saslpasswd" for manipulating
	user passwords in the "sasldb" database. This plugin attempts to use
	this utility to perform password manipulations required by your webmail
	users without any administrative interaction. Unfortunately, this
	scheme requires that the "saslpasswd" utility be run as the "cyrus"
	user - kind of a security problem since we have chosen to SUID a small
	script which will allow this to happen.

	This driver is based on the Squirrelmail Change SASL Password Plugin.
	See http://www.squirrelmail.org/plugin_view.php?id=107 for details.

	Installation:

	Change into the helpers directory. Edit the chgsaslpasswd.c file as is
	documented within it.

	Compile the wrapper program:
	gcc -o chgsaslpasswd chgsaslpasswd.c

	Chown the compiled chgsaslpasswd binary to the cyrus user and group
	that your browser runs as, then chmod them to 4550.

	For example, if your cyrus user is 'cyrus' and the apache server group is
	'nobody' (I've been told Redhat runs Apache as user 'apache'):

	chown cyrus:nobody chgsaslpasswd
	chmod 4550 chgsaslpasswd

	Stephen Carr has suggested users should try to run the scripts on a test
	account as the cyrus user eg;

	su cyrus -c "./chgsaslpasswd -p test_account"

	This will allow you to make sure that the script will work for your setup.
	Should the script not work, make sure that:
	1) the user the script runs as has access to the saslpasswd\|saslpasswd2
	file and proper permissions
	2) make sure the user in the chgsaslpasswd.c file is set correctly.
	This could save you some headaches if you are the paranoid type.


	2.1.3. Poppassd/Courierpassd (poppassd)
	---------------------------------------

	You can specify which host to connect to via 'password_pop_host' and
	what port via 'password_pop_port'. See config.inc.php.dist file for more info.


	2.1.4. LDAP (ldap)
	------------------

	See config.inc.php.dist file. Requires PEAR::Net_LDAP2 package.


	2.1.5. DirectAdmin Control Panel (directadmin)
	----------------------------------------------

	You can specify which host to connect to via 'password_directadmin_host' (don't
	forget to use tcp:// or ssl://) and what port via 'password_direactadmin_port'.
	The password enforcement with plenty customization can be done directly by
	DirectAdmin, please see http://www.directadmin.com/features.php?id=910
	See config.inc.php.dist file for more info.


	2.1.6. cPanel
	-------------

	cPanel offers various APIs. The `cpanel` driver is configured with and admin
	account. It can change user's passwords without access to the current password.
	See the next section.

	The `cpanel_webmail` driver authenticates as the current user and does not need
	an admin account. See 2.6.2.


	2.1.6.1. cPanel WHM (cpanel)
	----------------------------

	Install cPanel XMLAPI Client Class into Roundcube program/lib directory
	or any other place in PHP include path. You can get the class from
	https://raw.github.com/CpanelInc/xmlapi-php/master/xmlapi.php

	You can configure parameters for connection to cPanel's API interface.
	See config.inc.php.dist file for more info.


	2.1.6.2. cPanel Webmail (cpanel_webmail)
	----------------------------------------

	Specify the host to connect to via 'password_webmail_cpanel_host'. This driver
	comes with a minimal UAPI implementation and does not use the external xmlapi
	class. It requires php-curl extension.

	See config.inc.php.dist file for more info.


	2.1.7. XIMSS/Communigate (ximms)
	--------------------------------

	You can specify which host and port to connect to via 'password_ximss_host'
	and 'password_ximss_port'. See config.inc.php.dist file for more info.


	2.1.8. Virtualmin (virtualmin)
	------------------------------

	As in sasl driver this one allows to change password using shell
	utility called "virtualmin". See helpers/chgvirtualminpasswd.c for
	installation instructions. Requires virtualmin >= 4.09.


	2.1.9. hMailServer (hmail)
	--------------------------

	Requires PHP COM (Windows only). For access to hMail server on remote host
	you'll need to define 'hmailserver_remote_dcom' and 'hmailserver_server'.
	See config.inc.php.dist file for more info.


	2.1.10. PAM (pam)
	-----------------

	This driver is for changing passwords of shell users authenticated with PAM.
	Requires PECL's PAM extension to be installed (http://pecl.php.net/package/PAM).


	2.1.11. Chpasswd (chpasswd)
	---------------------------

	Driver that adds functionality to change the systems user password via
	the 'chpasswd' command. See config.inc.php.dist file.

	Attached wrapper script (helpers/chpass-wrapper.py) restricts password changes
	to uids >= 1000 and can deny requests based on a blacklist.


	2.1.12. LDAP - no PEAR (ldap_simple)
	-------------------------------------

	It's rewritten ldap driver that doesn't require the Net_LDAP2 PEAR extension.
	It uses directly PHP's ldap module functions instead (as Roundcube does).

	This driver is fully compatible with the ldap driver, but
	does not require (or uses) the
	$config['password_ldap_force_replace'] variable.
	Other advantages:
	* Connects only once with the LDAP server when using the search user.
	* Does not read the DN, but only replaces the password within (that is
	why the 'force replace' is always used).


	2.1.13. XMail (xmail)
	----------------------

	Driver for XMail (www.xmailserver.org). See config.inc.php.dist file
	for configuration description.


	2.1.14. Pw (pw_usermod)
	------------------------

	Driver to change the systems user password via the 'pw usermod' command.
	See config.inc.php.dist file for configuration description.


	2.1.15. domainFACTORY (domainfactory)
	-------------------------------------

	Driver for the hosting provider domainFACTORY (www.df.eu).
	No configuration options.


	2.1.16. DBMail (dbmail)
	------------------------

	Driver that adds functionality to change the users DBMail password.
	It only works with dbmail-users on the same host where Roundcube runs
	and requires shell access and gcc in order to compile the binary
	(see instructions in chgdbmailusers.c file).
	See config.inc.php.dist file for configuration description.

	Note: DBMail users can also use sql driver.


	2.1.17. Expect (expect)
	------------------------

	Driver to change user password via the 'expect' command.
	See config.inc.php.dist file for configuration description.


	2.1.18. Samba (smb)
	--------------------

	Driver to change Samba user password via the 'smbpasswd' command.
	See config.inc.php.dist file for configuration description.


	2.1.19. Vpopmail daemon (vpopmaild)
	-------------------------------------

	Driver for the daemon of vpopmail. Vpopmail is used with qmail to
	enable virtual users that are saved in a database and not in /etc/passwd.

	Set $config['password_vpopmaild_host'] to the host where vpopmaild runs.

	Set $config['password_vpopmaild_port'] to the port of vpopmaild.

	Set $config['password_vpopmaild_timeout'] to the timeout used for the TCP
	connection to vpopmaild (You may want to set it higher on busy servers).


	2.1.20. Plesk (Plesk RPC-API)
	-----------------------------

	Driver for changing Passwords via Plesk RPC-API. This Driver also works with
	Parallels Plesk Automation (PPA).

	You need to allow the IP of the Roundcube-Server for RPC-Calls in the Panel.

	Set $config['password_plesk_host'] to the Hostname / IP where Plesk runs
	Set your Admin or RPC User: $config['password_plesk_user']
	Set the Password of the User: $config['password_plesk_pass']
	Set $config['password_plesk_rpc_port'] for the RPC-Port. Usually its 8443
	Set the RPC-Path in $config['password_plesk_rpc_path']. Normally this is: enterprise/control/agent.php.


	2.1.21. Kpasswd
	---------------

	Driver to change the password in Kerberos environments via the 'kpasswd' command.
	See config.inc.php.dist file for configuration description.


	2.1.22. Modoboa
	---------------

	Driver to change the password in Modoboa servers.
	See config.inc.php.dist file for configuration description.


	2.1.23. LDAP - Password Modify Extended Operation (ldap_exop)
	-------------------------------------------------------------

	Modified version of ldap_simple.
	Password is changed using ldap_exop_passwd operation.
	PHP >= 7.2 required.


	2.2. Password Strength Drivers
	------------------------------

	Password plugin supports many password strength checking mechanisms which are
	handled by included drivers. Just pass driver name in 'password_strength_driver' option.


	2.2.1. Zxcvbn
	-------------

	Driver to use the Zxcvbn library to check password strength. Requires zxcvbn-php library.
	The library is not distributed with Roundcube (see composer.json-dist).
	Note: Required PHP's memory_limit >= 24M.

	Set $config['password_zxcvbn_min_score'] to define minimum acceptable password strength score.

	+ 2.2.2. Have I been pwned? (pwned)
	+ ---------------------------------
	+
	+ Driver using "Have I been pwned?" (https://haveibeenpwned.com/Passwords) API to
	+ check that entered passwords aren't already compromised (i.e., commonly known).
	+ The check is performed locally, the actual password is not transmitted anywhere else.
	+
	+ Requires curl (preferred) or allow_url_fopen to work.
	+
	+ Example configuration:
	+
	+ $config['password_strength_driver'] = 'pwned';
	+ $config['password_minimum_score'] = 3;
	+
	+ See the driver implementation file for more documentation.

	3. Driver API
	-------------

	Driver file (<driver_name>.php) must define rcube_<driver_name>_password class. Drivers should
	provide one or both of a public save() or check_strength() method.

	All password changing drivers (used in config `password_driver` - the password driver) must have
	a save() method. The same driver can also contain a check_strength() method or a separate driver
	containing this method can be used in `password_strength_driver` (the strength driver). To enable
	strength checks ensure `password_check_strength` is set to true.

	The save() method, used for changing the password has three arguments:
	First - current password, second - new password, third - current username.
	This method should return PASSWORD_SUCCESS on success or any of PASSWORD_CONNECT_ERROR,
	PASSWORD_CRYPT_ERROR, PASSWORD_ERROR when driver was unable to change password.
	Extended result (as a hash-array with 'message' and 'code' items) can be returned
	too. See existing drivers in drivers/ directory for examples.

	Optionally a password driver can contain a compare() method which has three arguments:
	First - current password, second - test password, third - compare type.
	Compare type: PASSWORD_COMPARE_CURRENT - when comparing the test password with current password.
	PASSWORD_COMPARE_NEW - when comparing the current password with the test password.
	For PASSWORD_COMPARE_CURRENT it should return error text if user entered and real current password
	DO NOT MATCH. For PASSWORD_COMPARE_NEW it should return error text if user entered and real current
	password DO MATCH. Else it should return null (no error).

	The check_strength() method, used for checking password strength has one argument: new password.
	This method should return an array with tho elements:
	- Score: integer from 1 (week) to 5 (strong)
	- Reason for the score (optional)

	Optionally a strength driver can contain a strength_rules() method. This has no arguments
	and returns a string, or array of strings explaining the password strength rules.


	4. Sudo setup
	-------------

	Some drivers that execute system commands (like chpasswd) require use of sudo command.
	Here's a sample for CentOS 7:

	# cat <<END >/etc/sudoers.d/99-roundcubemail
	apache ALL=NOPASSWD:/usr/sbin/chpasswd
	Defaults:apache !requiretty
	<<END

	Note: on different systems the username (here 'apache') may be different, e.g. www.
	Note: on some systems the disabling tty line may not be needed.
	diff --git a/plugins/password/drivers/pwned.php b/plugins/password/drivers/pwned.php
	new file mode 100644
	index 000000000..8661f73cf
	--- /dev/null
	+++ b/plugins/password/drivers/pwned.php
	@@ -0,0 +1,216 @@
	+<?php
	+
	+/**
	+ * Have I Been Pwned Password Strength Driver
	+ *
	+ * Driver to check passwords using HIBP:
	+ * https://haveibeenpwned.com/Passwords
	+ *
	+ * This driver will return a strength of:
	+ * 3: if the password WAS NOT found in HIBP
	+ * 1: if the password WAS found in HIBP
	+ * 2: if there was an ERROR retrieving data.
	+ *
	+ * To use this driver, configure (in ../config.inc.php):
	+ *
	+ * $config['password_strength_driver'] = 'pwned';
	+ * $config['password_minimum_score'] = 3;
	+ *
	+ * Set the minimum score to 3 if you want to make sure that all
	+ * passwords are successfully checked against HIBP (recommended).
	+ *
	+ * Set it to 2 if you still want to accept passwords in case a
	+ * HIBP check fails for some (technical) reason.
	+ *
	+ * Setting the minimum score to 1 or less effectively renders
	+ * the checks useless, as all passwords would be accepted.
	+ * Setting it to 4 or more will effectively reject all passwords.
	+ *
	+ * This driver will only return a maximum score of 3 because not
	+ * being listed in HIBP does not necessarily mean that the
	+ * password is a good one. It is therefore recommended to also
	+ * configure a minimum length for the password.
	+ *
	+ * Background reading (don't worry, your passwords are not sent anywhere):
	+ * https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/#cloudflareprivacyandkanonymity
	+ *
	+ * @version 1.0
	+ * @author Christoph Langguth
	+ *
	+ * Copyright (C) The Roundcube Dev Team
	+ *
	+ * This program is free software: you can redistribute it and/or modify
	+ * it under the terms of the GNU General Public License as published by
	+ * the Free Software Foundation, either version 3 of the License, or
	+ * (at your option) any later version.
	+ *
	+ * This program is distributed in the hope that it will be useful,
	+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
	+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	+ * GNU General Public License for more details.
	+ *
	+ * You should have received a copy of the GNU General Public License
	+ * along with this program. If not, see http://www.gnu.org/licenses/.
	+ */
	+
	+class rcube_pwned_password
	+{
	+ // API URL. Note: the trailing slash is mandatory.
	+ const API_URL = 'https://api.pwnedpasswords.com/range/';
	+
	+ // See https://www.troyhunt.com/enhancing-pwned-passwords-privacy-with-padding/
	+ const ENHANCED_PRIVACY_CURL = 1;
	+
	+ // check result constants
	+ const CHECKED_NOT_LISTED = 0;
	+ const CHECKED_LISTED = 1;
	+ const CHECK_RUNTIME_ERROR = 2;
	+
	+ const CONFIGURATION_ERROR = 'CONFIGURATION ERROR: Need curl or allow_url_fopen to check for compromised passwords';
	+
	+ /**
	+ * Rule description.
	+ *
	+ * @return human-readable description of the check rule.
	+ */
	+ function strength_rules()
	+ {
	+ // show error message (only) if configuration won't allow to check for pwned passwords.
	+ if (!$this->can_retrieve()) {
	+ return array("<font size='+1' color='red'><b>" .self::CONFIGURATION_ERROR. "</b></font>");
	+ }
	+
	+ // otherwise, show hint.
	+ $rc = rcmail::get_instance();
	+ return array($rc->gettext('password.pwned_mustnotbedisclosed'));
	+ }
	+
	+ /**
	+ * Password strength check.
	+ * Return values:
	+ * 1 - if password is definitely compromised.
	+ * 2 - if status for password can't be determined (network failures etc.)
	+ * 3 - if password is not publicly known to be compromised.
	+ * @param string $passwd Password
	+ *
	+ * @return array Score (1 to 3) and Reason
	+ */
	+ function check_strength($passwd)
	+ {
	+ $result = $this->is_pwned($passwd);
	+
	+ if ($result === self::CHECKED_NOT_LISTED) {
	+ // all good
	+ return array(3, null);
	+ } elseif ($result === self::CHECKED_LISTED) {
	+ // compromised password
	+ $rc = rcmail::get_instance();
	+ return array(1, $rc->gettext('password.pwned_isdisclosed'));
	+ } else {
	+ // other error message, return unchanged
	+ return array(2, $result);
	+ }
	+ }
	+
	+ function is_pwned($passwd)
	+ {
	+ if (!($this->can_retrieve())) {
	+ return self::CONFIGURATION_ERROR;
	+ }
	+
	+ list($prefix, $suffix) = $this->hash_split($passwd);
	+
	+ $suffixes = $this->retrieve_suffixes(self::API_URL . $prefix);
	+
	+ if ($suffixes) {
	+ $result = $this->is_in_list($suffix, $suffixes);
	+ if ($result !== self::CHECK_RUNTIME_ERROR) {
	+ return $result;
	+ }
	+ }
	+
	+ // fallthrough: some error occurred while retrieving or parsing list
	+ $rc = rcmail::get_instance();
	+ return $rc->gettext('password.pwned_fetcherror');
	+ }
	+
	+ function hash_split($passwd)
	+ {
	+ $hash = strtolower(sha1($passwd));
	+ $prefix = substr($hash, 0, 5);
	+ $suffix = substr($hash, 5);
	+ return array($prefix, $suffix);
	+ }
	+
	+ function can_retrieve()
	+ {
	+ return $this->can_curl() \|\| $this->can_fopen();
	+ }
	+
	+ function can_curl()
	+ {
	+ return (in_array('curl', get_loaded_extensions())
	+ && function_exists('curl_init'));
	+ }
	+
	+ function can_fopen()
	+ {
	+ return ini_get('allow_url_fopen');
	+ }
	+
	+ function retrieve_suffixes($url)
	+ {
	+ if ($this->can_curl()) {
	+ return $this->retrieve_curl($url);
	+ } else {
	+ return $this->retrieve_fopen($url);
	+ }
	+ }
	+
	+ function retrieve_curl($url)
	+ {
	+ $ch = curl_init();
	+ curl_setopt($ch, CURLOPT_URL, $url);
	+ curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	+ if (self::ENHANCED_PRIVACY_CURL == 1) {
	+ curl_setopt($ch, CURLOPT_HTTPHEADER, array('Add-Padding: true'));
	+ }
	+ $output = curl_exec($ch);
	+ curl_close($ch);
	+ return $output;
	+ }
	+
	+ function retrieve_fopen($url)
	+ {
	+ $output = '';
	+ $ch = fopen($url, 'r');
	+ while (!feof($ch)) {
	+ $output .= fgets($ch);
	+ }
	+ fclose($ch);
	+ return $output;
	+ }
	+
	+ function is_in_list($candidate, $list)
	+ {
	+ // initialize to error message in case there are no lines at all
	+ $result = self::CHECK_RUNTIME_ERROR;
	+
	+ foreach(preg_split('/[\r\n]+/', $list) as $line) {
	+ $line = strtolower($line);
	+ if (preg_match('/^([0-9a-f]{35}):(\d)+$/', $line, $matches)) {
	+ if (($matches[2] > 0) && ($matches[1] === $candidate)) {
	+ // more than 0 occurrences, and suffix matches
	+ // -> password is compromised
	+ return self::CHECKED_LISTED;
	+ }
	+ // valid line, not matching the current password
	+ $result = self::CHECKED_NOT_LISTED;
	+ } else {
	+ // invalid line
	+ return self::CHECK_RUNTIME_ERROR;
	+ }
	+ }
	+ return $result;
	+ }
	+}
	diff --git a/plugins/password/localization/de_DE.inc b/plugins/password/localization/de_DE.inc
	index 620c9f8ed..ca9738e10 100644
	--- a/plugins/password/localization/de_DE.inc
	+++ b/plugins/password/localization/de_DE.inc
	@@ -1,40 +1,43 @@
	<?php

	/*
	+-----------------------------------------------------------------------+
	\| Localization file of the Roundcube Webmail Password plugin \|
	\| \|
	\| Copyright (C) The Roundcube Dev Team \|
	\| \|
	\| Licensed under the GNU General Public License version 3 or \|
	\| any later version with exceptions for skins & plugins. \|
	\| See the README file for a full license statement. \|
	+-----------------------------------------------------------------------+

	For translation see https://www.transifex.com/projects/p/roundcube-webmail/resource/plugin-password/
	*/

	$labels['changepasswd'] = 'Passwort ändern';
	$labels['curpasswd'] = 'Aktuelles Passwort:';
	$labels['newpasswd'] = 'Neues Passwort:';
	$labels['confpasswd'] = 'Neues Passwort bestätigen:';
	$messages['nopassword'] = 'Bitte geben Sie ein neues Passwort ein.';
	$messages['nocurpassword'] = 'Bitte geben Sie Ihr aktuelles Passwort ein.';
	$messages['passwordincorrect'] = 'Aktuelles Passwort ist falsch.';
	$messages['passwordinconsistency'] = 'Passwörter stimmen nicht überein, bitte versuchen Sie es erneut.';
	$messages['crypterror'] = 'Neues Passwort konnte nicht gespeichert werden. Verschlüsselungsfunktion fehlt.';
	$messages['connecterror'] = 'Neues Passwort konnte nicht gespeichert werden. Verbindungsfehler.';
	$messages['internalerror'] = 'Neues Passwort konnte nicht gespeichert werden.';
	$messages['passwordshort'] = 'Passwort muss mindestens $length Zeichen lang sein.';
	$messages['passwordweak'] = 'Passwort muss mindestens eine Zahl und ein Sonderzeichen enthalten.';
	$messages['passwordtooweak'] = 'Das Passwort ist zu schwach.';
	$messages['passwordnoseq'] = 'Das Passwort sollte keine Sequenz wie 123456 oder QWERTY sein.';
	$messages['passwordnocommon'] = 'Passwort sollte kein allgemeines Wort oder Name sein.';
	$messages['passwordforbidden'] = 'Passwort enthält unzulässige Zeichen.';
	$messages['firstloginchange'] = 'Das ist Ihre erste Anmeldung. Bitte ändern Sie Ihr Passwort.';
	$messages['disablednotice'] = 'Das System befindet sich derzeit im Wartungszustand und eine Passwortänderung ist im Moment nicht möglich. Alles sollte bald wieder normal sein. Wir bitten um Entschuldigung für die Unannehmlichkeiten.';
	$messages['passwinhistory'] = 'Dieses Passwort wurde bereits zu einem früheren Zeitpunkt verwendet.';
	$messages['samepasswd'] = 'Das neue Passwort muss sich von dem Alten unterscheiden.';
	$messages['passwdexpirewarning'] = 'Achtung! Ihr Passwort läuft am $expirationdatetime ab. Ändern Sie es rechtzeitig.';
	$messages['passwdexpired'] = 'Ihr Passwort ist abgelaufen, ändern Sie es jetzt!';
	$messages['passwdconstraintviolation'] = 'Passwortbeschränkungsverletzung. Passwort wahrscheinlich zu schwach.';
	+$messages['pwned_mustnotbedisclosed'] = 'Passwort darf nicht <a href="https://haveibeenpwned.com/Passwords" target="_blank">allgemein bekannt</a> sein.';
	+$messages['pwned_isdisclosed'] = 'Dieses Passwort ist bereits allgemein bekannt.';
	+$messages['pwned_fetcherror'] = 'FEHLER: Die Überprüfung kompromittierter Passwörter ist fehlgeschlagen.';
	diff --git a/plugins/password/localization/en_US.inc b/plugins/password/localization/en_US.inc
	index c39ae5ce7..9fda3317b 100644
	--- a/plugins/password/localization/en_US.inc
	+++ b/plugins/password/localization/en_US.inc
	@@ -1,43 +1,46 @@
	<?php

	/*
	+-----------------------------------------------------------------------+
	\| Localization file of the Roundcube Webmail Password plugin \|
	\| \|
	\| Copyright (C) The Roundcube Dev Team \|
	\| \|
	\| Licensed under the GNU General Public License version 3 or \|
	\| any later version with exceptions for skins & plugins. \|
	\| See the README file for a full license statement. \|
	+-----------------------------------------------------------------------+

	For translation see https://www.transifex.com/projects/p/roundcube-webmail/resource/plugin-password/
	*/

	$labels = array();
	$labels['changepasswd'] = 'Change password';
	$labels['curpasswd'] = 'Current Password:';
	$labels['newpasswd'] = 'New Password:';
	$labels['confpasswd'] = 'Confirm New Password:';

	$messages = array();
	$messages['nopassword'] = 'Please input new password.';
	$messages['nocurpassword'] = 'Please input current password.';
	$messages['passwordincorrect'] = 'Current password incorrect.';
	$messages['passwordinconsistency'] = 'Passwords do not match, please try again.';
	$messages['crypterror'] = 'Could not save new password. Encryption function missing.';
	$messages['connecterror'] = 'Could not save new password. Connection error.';
	$messages['internalerror'] = 'Could not save new password.';
	$messages['passwordshort'] = 'Password must be at least $length characters long.';
	$messages['passwordweak'] = 'Password must include at least one number and one punctuation character.';
	$messages['passwordtooweak'] = 'Password too weak.';
	$messages['passwordnoseq'] = 'Password should not be a sequence like 123456 or QWERTY.';
	$messages['passwordnocommon'] = 'Password should not be a common word or name.';
	$messages['passwordforbidden'] = 'Password contains forbidden characters.';
	$messages['firstloginchange'] = 'This is your first login. Please change your password.';
	$messages['disablednotice'] = 'The system is currently under maintenance and password change is not possible at the moment. Everything should be back to normal soon. We apologize for any inconvenience.';
	$messages['passwinhistory'] = 'This password has already been used previously.';
	$messages['samepasswd'] = 'New password have to be different from the old one.';
	$messages['passwdexpirewarning'] = 'Warning! Your password will expire soon, change it before $expirationdatetime.';
	$messages['passwdexpired'] = 'Your password has expired, you have to change it now!';
	$messages['passwdconstraintviolation'] = 'Password constraint violation. Password probably too weak.';
	+$messages['pwned_mustnotbedisclosed'] = 'Password must not be <a href="https://haveibeenpwned.com/Passwords" target="_blank">commonly known</a>.';
	+$messages['pwned_isdisclosed'] = 'This password is commonly known.';
	+$messages['pwned_fetcherror'] = 'ERROR: Verification of compromised passwords failed.';
	diff --git a/plugins/password/localization/fr_FR.inc b/plugins/password/localization/fr_FR.inc
	index aba330103..a83fa0cea 100644
	--- a/plugins/password/localization/fr_FR.inc
	+++ b/plugins/password/localization/fr_FR.inc
	@@ -1,40 +1,43 @@
	<?php

	/*
	+-----------------------------------------------------------------------+
	\| Localization file of the Roundcube Webmail Password plugin \|
	\| \|
	\| Copyright (C) The Roundcube Dev Team \|
	\| \|
	\| Licensed under the GNU General Public License version 3 or \|
	\| any later version with exceptions for skins & plugins. \|
	\| See the README file for a full license statement. \|
	+-----------------------------------------------------------------------+

	For translation see https://www.transifex.com/projects/p/roundcube-webmail/resource/plugin-password/
	*/

	$labels['changepasswd'] = 'Changer le mot de passe';
	$labels['curpasswd'] = 'Mot de passe actuel :';
	$labels['newpasswd'] = 'Nouveau mot de passe :';
	$labels['confpasswd'] = 'Confirmer le nouveau mot de passe :';
	$messages['nopassword'] = 'Veuillez saisir le nouveau mot de passe.';
	$messages['nocurpassword'] = 'Veuillez saisir le mot de passe actuel.';
	$messages['passwordincorrect'] = 'Le mot de passe actuel est erroné.';
	$messages['passwordinconsistency'] = 'Les mots de passe ne correspondent pas, veuillez ressayer.';
	$messages['crypterror'] = 'Impossible d’enregistrer le nouveau mot de passe. La fonction de chiffrement est manquante.';
	$messages['connecterror'] = 'Impossible d’enregistrer le nouveau mot de passe. Erreur de connexion.';
	$messages['internalerror'] = 'Impossible d’enregistrer le nouveau mot de passe.';
	$messages['passwordshort'] = 'Le mot de passe doit comporter au moins $length caractères.';
	$messages['passwordweak'] = 'Le mot de passe doit comporter au moins un chiffre et un signe de ponctuation.';
	$messages['passwordtooweak'] = 'Le mot de passe est trop faible.';
	$messages['passwordnoseq'] = 'Le mot de passe ne devrait pas être une séquence comme 123456, QWERTY ou AZERTY.';
	$messages['passwordnocommon'] = 'Le mot de passe ne devrait pas être un nom commun ou un nom.';
	$messages['passwordforbidden'] = 'Le mot de passe contient des caractères interdits.';
	$messages['firstloginchange'] = 'Ceci est votre première connexion. Veuillez changer votre mot de passe.';
	$messages['disablednotice'] = 'Le système est en cours de maintenance et les changements de mot de passe sont impossibles pour l’instant. Tout devrait redevenir normal sous peu. Nous regrettons tout inconvénient que cette situation pourrait occasionner.';
	$messages['passwinhistory'] = 'Ce mot de passe a déjà été utilisé précédemment.';
	$messages['samepasswd'] = 'Le nouveau mot de passe doit être différent de l’ancien.';
	$messages['passwdexpirewarning'] = 'Avertissement ! Votre mot de passe arrivera prochainement à expiration. Changez-le avant le $expirationdatetime.';
	$messages['passwdexpired'] = 'Votre mot de passe est expiré, vous devez le changer maintenant';
	$messages['passwdconstraintviolation'] = 'Contrainte non respectée. Le mot de passe est probablement trop faible.';
	+$messages['pwned_mustnotbedisclosed'] = 'Le mot de passe ne doit pas être <a href="https://haveibeenpwned.com/Passwords" target="_blank">communément connu</a>.';
	+$messages['pwned_isdisclosed'] = 'Ce mot de passe est communément connu.';
	+$messages['pwned_fetcherror'] = 'ERREUR: La vérification des mots de passe compromis a échoué';

File Metadata

Mime Type: text/x-diff
Expires: Sat, Apr 5, 1:54 AM (8 h, 3 s)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 175739
Default Alt Text: (34 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions