SQL Issue Update
=====================

If I change the "bind-address" from 127.0.0.1 to the actual IP address ALL webservices (RoundCube, SOGo, iRedAdmin, ClueBringer, Awstats) will fail with either a DB error or a 500 Internal Server Error.

As noted in /etc/default/iptables...

# MySQL service.
# Note: Please make sure MySQL service is not binding to localhost with
#       'bind-address=127.0.0.1'.
-A INPUT -p tcp --dport 3306 -j ACCEPT

NOTE: Error remains the same whether "skip-external-locking" is commented out or not.

As per the documentation on http://www.iredmail.org/docs/password.hashes.html running the following results in an error - "ERROR 1046 (3D000): No database selected".

UPDATE mailbox SET password='{CRYPT}MyNewPassword' WHERE username='postmaster@domain.internal';

Adding the database to the string, results in the password not being accepted on the webinterface (both as "MyNewPassword" and "{CRYPT}MyNewPassword".

UPDATE vmail.mailbox SET password='{CRYPT}MyNewPassword' WHERE username='postmaster@domain.internal';

Good thing I took a snapshot of the server before I made this change....

That tutorial is a good starting point, but I it doesn't give specifics of creating a "Salted MD5" as you requested.

I was able to find more details about dovecot & the different encryption schemes at http://wiki2.dovecot.org/Tools/Doveadm/Pw

See attached screenshot.  This is a virtual machine inside a private network (so I'm ok with using '123456' as a test password.

I also tried a plain text password & that didn't work either.

sql> UPDATE mailbox SET password='{PLAIN}123456' WHERE username='user@domain.ltd';

I still have access to Roundcube, but no access to Cluebringer & Awstats.

Good news/Bad news.

That worked - I now have access to Cluebringer & Awstats, BUT I lost access to SOGo...

Also, if I reset the password using iRedAdmin, I get access back to SOGo, but lose it to Cluebringer & Awstats.

=================
UPDATE: Found that awstats was not updating properly because it was reading the wrong log file - had to update awstats.conf & awstats.web.conf files to point to the correct (SSL) log file.
Change

LogFile="/var/log/apache2/access.log"

to

LogFile="/var/log/apache2/ssl_access.log"

@andypoms, make sure you're using a salted MD5 hash without '{MD5}'. And SOGo doesn't work with salted MD5 hash without '{CRYPT}' prefix.

@dittman: Nginx doesn't have SQL/LDAP authentication module, so you can setup basic http authentication for Awstats/Cluebringer with Nginx at all.