How can I get mailbox passwords from db or from api?

cocoonkid

I am trying to export a high number of mailbox data to schedule sync jobs on the new system.
specifically usernames and passwords,

I can get all the usernames via the API no problem.
But I need the paswords too.

I am thankful for any kind advice.

Thank you!

diekuh

We don’t save passwords plain text.

cocoonkid

of course.

So for a imapsync migration I would set a App password for all accounts via api and then use that to migrate all the mails and then ask the users to change them again ?

And would I not like to migrate the password hashes to the new server so the users dont need to change anything?

Thank you for your help.

cocoonkid

Is there any news on this?

cocoonkid

My Apology maybe I should have worded this another way.

Of course I want to migrate all password hashes from A to B to make the user experience great.

Also how would I offer users to change their passwords on their own? Is there a best practice for that?

I’d hope to have a trigger button to "send password reset email"or something similar.

Balou7419

I think there is no way to get passwords from mailcow.

You could use bash scripts and curl to change the the password to a default one using the mailcow-api.
To copy all mailboxes (imapsysnc or direct dir/file-copy) you need a default password(imapsync) or a decrypted
maildomain in mail-dir format to copy.

cocoonkid

Thanks @Balou7419 .

Yes that can be done. But I really wonder what am I missing or is there just now easy way to completely sync user accounts and password from A to B ? And is there no function for users to set new passwords without having admin manually set them up?

This doesn’t really make sense for me, that’s why I am strongly suspecting I am missing something 😅

Felix

You can use a static master user in dovecot and use that to set up imapsync jobs on the target.
If you’re using dovecot in the environment you’re migrating to then you can simply copy the password hashes over directly from the database. At least on my instance they are prefixed with the hashing algorithm used (eg. {BLF-CRYPT}) so dovecot should know what to do with them. To get a dump from the database check out this: https://mailcow.github.io/mailcow-dockerized-docs/u_e-backup_restore-mysql/

cocoonkid

Thanks a bug bunch for these pointers! Much appreciated!