93 Zeilen
2,7 KiB
Markdown
93 Zeilen
2,7 KiB
Markdown
|
## mailcow Admin Account
|
||
|
|
|
||
|
|
Resets the mailcow admin account to a random password. Older mailcow: dockerized installations may find the `mailcow-reset-admin.sh` script in their mailcow root directory (mailcow_path).
|
||
|
|
|
||
|
|
```
|
||
|
|
cd mailcow_path
|
||
|
|
./helper-scripts/mailcow-reset-admin.sh
|
||
|
|
```
|
||
|
|
|
||
|
|
## Reset MySQL Passwords
|
||
|
|
|
||
|
|
Stop the stack by running `docker-compose stop`.
|
||
|
|
|
||
|
|
When the containers came to a stop, run this command:
|
||
|
|
|
||
|
|
```
|
||
|
|
docker-compose run --rm --entrypoint '/bin/sh -c "gosu mysql mysqld --skip-grant-tables & sleep 10 && mysql -hlocalhost -uroot && exit 0"' mysql-mailcow
|
||
|
|
```
|
||
|
|
|
||
|
|
### 1\. Find database name
|
||
|
|
|
||
|
|
```
|
||
|
|
# source mailcow.conf
|
||
|
|
# docker-compose exec mysql-mailcow mysql -u${DBUSER} -p${DBPASS} ${DBNAME}
|
||
|
|
MariaDB [(none)]> show databases;
|
||
|
|
+--------------------+
|
||
|
|
| Database |
|
||
|
|
+--------------------+
|
||
|
|
| information_schema |
|
||
|
|
| mailcow_database | <=====
|
||
|
|
| mysql |
|
||
|
|
| performance_schema |
|
||
|
|
+--------------------+
|
||
|
|
4 rows in set (0.00 sec)
|
||
|
|
```
|
||
|
|
|
||
|
|
### 2\. Reset one or more users
|
||
|
|
|
||
|
|
#### 2\.1 Maria DB < 10.4 (older mailcow installations)
|
||
|
|
|
||
|
|
Both "password" and "authentication_string" exist. Currently "password" is used, but better set both.
|
||
|
|
|
||
|
|
```
|
||
|
|
MariaDB [(none)]> SELECT user FROM mysql.user;
|
||
|
|
+--------------+
|
||
|
|
| user |
|
||
|
|
+--------------+
|
||
|
|
| mailcow | <=====
|
||
|
|
| root |
|
||
|
|
+--------------+
|
||
|
|
2 rows in set (0.00 sec)
|
||
|
|
|
||
|
|
MariaDB [(none)]> FLUSH PRIVILEGES;
|
||
|
|
MariaDB [(none)]> UPDATE mysql.user SET authentication_string = PASSWORD('gotr00t'), password = PASSWORD('gotr00t') WHERE User = 'root';
|
||
|
|
MariaDB [(none)]> UPDATE mysql.user SET authentication_string = PASSWORD('mookuh'), password = PASSWORD('mookuh') WHERE User = 'mailcow' AND Host = '%';
|
||
|
|
MariaDB [(none)]> FLUSH PRIVILEGES;
|
||
|
|
```
|
||
|
|
|
||
|
|
#### 2\.2 Maria DB >= 10.4 (current mailcows)
|
||
|
|
|
||
|
|
```
|
||
|
|
MariaDB [(none)]> SELECT user FROM mysql.user;
|
||
|
|
+--------------+
|
||
|
|
| user |
|
||
|
|
+--------------+
|
||
|
|
| mailcow | <=====
|
||
|
|
| root |
|
||
|
|
+--------------+
|
||
|
|
2 rows in set (0.00 sec)
|
||
|
|
|
||
|
|
MariaDB [(none)]> FLUSH PRIVILEGES;
|
||
|
|
MariaDB [(none)]> ALTER USER 'mailcow'@'%' IDENTIFIED BY 'mookuh';
|
||
|
|
MariaDB [(none)]> ALTER USER 'root'@'%' IDENTIFIED BY 'gotr00t';
|
||
|
|
MariaDB [(none)]> ALTER USER 'root'@'localhost' IDENTIFIED BY 'gotr00t';
|
||
|
|
MariaDB [(none)]> FLUSH PRIVILEGES;
|
||
|
|
```
|
||
|
|
|
||
|
|
## Remove Two-Factor Authentication
|
||
|
|
|
||
|
|
### For mailcow WebUI:
|
||
|
|
|
||
|
|
This works similar to resetting a MySQL password, now we do it from the host without connecting to the MySQL CLI:
|
||
|
|
|
||
|
|
```
|
||
|
|
source mailcow.conf
|
||
|
|
docker-compose exec mysql-mailcow mysql -u${DBUSER} -p${DBPASS} ${DBNAME} -e "DELETE FROM tfa WHERE username='YOUR_USERNAME';"
|
||
|
|
```
|
||
|
|
|
||
|
|
### For SOGo:
|
||
|
|
|
||
|
|
```
|
||
|
|
docker-compose exec -u sogo sogo-mailcow sogo-tool user-preferences set defaults user@example.com SOGoGoogleAuthenticatorEnabled '{"SOGoGoogleAuthenticatorEnabled":0}'
|
||
|
|
```
|