Password management

gopi_65986

I just installed mailcow+sogo and added a few mailboxes with a password that the users need to change on first login. What config changes do I make to require them to change their passwords on first login?

ETNyx

Maybe my English is bad, well it is,… But what are you asking?

You wrote. I made mailbox with a password reset. That mean including check the checkbox “Force password update at next login This user will only be able to login to Mail. App passwords remain useable.”, right?

And than you ask how to force user to change password on first login? You just did, or it is not working, or you are asking something different? I really do not follow sorry, please try to ask again in another sentence.

DocFraggle

Automatic password reset via the checkbox is working only when logging into the mailcow UI, not Sogo. Maybe that’s the problem here?

Tell your users to reset their password by logging into https://mail.your.domain and not https://mail.your.domain/SoGo

esackbauer

Additional remark:
You could avoid this if you disable the users for loggin in directly in SOGo, so that they need to login in to mailcow UI first and then click Webmail.
That has 2 advantages:
You only need to maintain one 2FA code, instead of two.
And you are ready for the coming LDAP/OIDC upgrade, that will disable the direct SOGo login anyways.

gopi_65986

Thank you @esackbauer and @DocFraggle for your help. Much appreciated.

I’ll disable SOGo login. Follow-up:

1) Is there a way to go directly to Webmail after logging in to mailcow, not via the mailbox settings page?
2) Is there a way to go to the mailbox settings page from the Webmail page?

Appreciate your help.

DocFraggle

1) Yes, top right corner, in the menu below “Apps”
2) No…

gopi_65986

Thank you @DocFraggle. Let me elaborate my questions:

Email users normally expect to see their email after logging in, not the dashboard page. In other words, it should be possible to take the users directly to the SOGo webmail after logging into Mailcow.

Email users also need to access their dashboard once in a while. It’s typically available via the user account dropdown.

DocFraggle

I thought this is all about changing the password before the first login to Sogo?
Normally, the user doesn’t really need the mailcow dashboard except for setting his password, so I suggest to communicate the Sogo URL as main entry point and the mailcow UI URL for settings etc.
As Sogo is merely an addon used by mailcow to provide webmail and ActiveSync that’s currently the only way

gopi_65986

Thanks. Will do👍