SOGO -User Email Password Reset

anant

On the sogo login the user email password-reset or forget password option not availed, Can anyone suggest where to get this option
?

anyone have any idea?

maddler

anant there would be no safe way to communicate the new password while you have no access to your account.
You might build an external page, using API, but you would still need to store somewhere an alternative channel (mobile number?) to send a token to be used to validate the request and then send the new password.
That’s doable but there’s some work involved.

DocFraggle

You won’t find one, how do you expect this process to work?
The mailcow admin can reset the password

invaliduser

you can log in to the mailcow ui as the email and reset it there and if you have completely forgotten it you would have to reset it as an admin or build your own app and use the api.

SOgos sessions don’t last long enough for you use use that as a logged-in but forgot my password thing.

maddler

invaliduser if you forgot the password, you can’t login 😉

anant

invaliduser

DOne the same , I have create the test email id and tried to reset and save.
after save I am not able to get the mailcow web page, they block my public IP

anant

it is possible to create our own feature like –button use the html or javascript …..

but anyone know where to apply the script or code ….so whenever user try to click forget button page move to authencation page using mob no or secret question answer to revoke his password

what is the process while follow ?

maddler

You would also need an SMS gateway to send the token. As I said, that’s not impossibile, but not as simple as just having a new page added to SoGo (or Mailcow UI).
Also note that any weakness in the process might expose your user to a significant security risk.
Unless your user base is big, you might prefer just reset their password if/when needed using the admin access.
The process to follow would change based on what exactly you want to do, and how:

patch Sogo?
patch MailcowUI?
add an external page?
something else?

anant

Thanks for all of your suggestion …I will keep it mind

anant

Hi Team,
The commercial support- they will provide reset/forget feature option ?

maddler

That’s more a feature request than a support request, IMHO.
There’s a decent effort involved. You can try to reach to them, but I’d be surprised.

anant

Okay , Thanks

esackbauer

This could work with external authentication managers, e.g. like keycloak or Authentik.
Authentik can even bind to the credentials of mailcow: https://goauthentik.io/integrations/sources/mailcow/
But I guess the cleaner solution will be the upcoming OIDC solution so you can manage users with that external tool and have mailcow/SOGO etc authenticate against it.

anant

For normal email user authentication on sogo ,, it is working ?

esackbauer

Is what working?

Julinium

Hello.
Hopefully it’s not too late but you should have configured an external email address for password recovery for your user, as explained in the mailcow documentation > Forgot Password Feature.

If you are the admin (of the domain or of the server), you may get a solution from this mailcow documentation section : Reset Passwords (incl. SQL)