Re: James Webadmin

2025-02-22 Thread cryptearth
Hello Jean, that was a nice read. Thank you very much for it. With the linked example I got it work. As I mentioned: I don't see my example to use mutual TLS as a way the James project should implement to protect the webadmin. The JWT already does a good job. And although it's possible to revo

Re: James Webadmin

2025-02-19 Thread Jean Helou
hi everyone, I finally had the time to take a look at the code. With regards to setting up https for webmin Sadly spark's code forces us to go through a keystore, there is no way to bypass that without changing spark. One option I have not yet investigated is building a keystore from a more class

Re: James Webadmin

2025-02-16 Thread cryptearth
Hey there everyone, so I put together some lines and uploaded them onto my github: https://github.com/n0xena/apache-james-webadmin The basic gist: There's one certificate generator and two files to show how to setup the server and client. It's pretty much the same code already in place for the

Re: James Webadmin

2025-02-14 Thread Ilya Terskov
Hi there Matt. Looking forward anything u doin :) i think u need use - So long © as ur special word for something pretty hard and need a lot of time to make it work ^_^ пт, 14 февр. 2025 г., 12:05 cryptearth : > Well, a simple credential based auth like a password as the most common > and basic f

Re: James Webadmin

2025-02-13 Thread cryptearth
Well, a simple credential based auth like a password as the most common and basic form of a challenge-response would work if the webadmin wouldn't be a rest endpoint. But as it is and the way a rest api is meant to be used this credential has to be give at each request. Fun fact: it doesn'T rea

Re: James Webadmin

2025-02-12 Thread Ilya Terskov
Hi guys, so if using lets encrypt certificate, anyone can get access? What about certificates with password? Client need to write correct one to get access? Also additional user/pass layer i think good thing ofc with tls/ssl. Thanks for your hard work. I not developer and all i can help u with just

Re: James Webadmin

2025-02-12 Thread cryptearth
Hello Benoit, I'm happy to provide something back to the James project. Unfortunately I read your reply too late to start work on it over the past weekend. And currently I work long shifts due to high backlog that has to be cleaned up. I try to tinker some lines together over the upcomming we

Re: James Webadmin

2025-02-09 Thread Benoit TELLIER
Hi there I had a private discussion couple of week ago with Jean HELOU who complained of webadmin being hard top secure and hé proposer settings up an optional basic auth scheme, easier to use that the jwt bearer token. Would this be helping? Would this be something you would be willing to contri

Re: James Webadmin

2025-02-08 Thread cryptearth
Hi Ilya, for me in my very own personal opinion using RSA keys would be fine already, or any other established public-key auth like SSH. But JWT already is some sorts of this which just has to be implemented correctly. I tried to look into it but honestly not really understood it. So I guess

Re: James Webadmin

2025-02-07 Thread Ilya Terskov
yeah guys i tried that in the end but one problem - if i have forwards to other email - it need to delete also, same for aliases, so if doing script it need to do all that and recursively. we sure need 3.9.0 with actions working :) about security on it i think we need just RSA keys just like used i

Re: James Webadmin

2025-02-06 Thread cryptearth
Hello Ilya, sorry for my late reply to that topic. As you seem to have figured out by now: The webadmin isn't an web admin panel but rather just an REST api. First of all I have to stress about security: As for now webadmin doesn't have any proper security. Everyone who has access to it has

Re: James Webadmin

2025-02-06 Thread Benoit TELLIER
Either upgrade...Or delete each mailbox individually. --  Best regards, Benoit TELLIER General manager of Linagora VIETNAM. Product owner for Team-Mail product. Chairman of the Apache James project. Mail: btell...@linagora.com Tel: (0033) 6 77 26 04 58 (WhatsApp, Signal) Le févr. 7, 2025 4:3

Re: James Webadmin

2025-02-06 Thread Ilya Terskov
Hi Benoit. Then how i should delete user and his mailbox? If i just delete and create user with same name it have all messages he have before deleting. How clear data about user completely? чт, 6 февр. 2025 г. в 16:33, Benoit TELLIER : > This route is not available on 3.8.x release of James but o

Re: James Webadmin

2025-02-06 Thread Benoit TELLIER
This route is not available on 3.8.x release of James but on later changes To use it either run on master or wait a 3.9.0 release. Refer to  https://james.staged.apache.org/james-distributed-app/3.8.1/operate/webadmin.html  to see what is supported for your release. Be mindful that some of those

Re: James Webadmin

2025-02-05 Thread Ilya Terskov
what can i do? user i...@hranitel-ist.ru exist :c same for domains curl -X DELETE doing good but curl -X POST with action=deleteData got same error чт, 6 февр. 2025 г. в 13:30, Tran Tung : > The response is from the james webadmin, > > The request looks normal. > > But that response for case when

Re: James Webadmin

2025-02-05 Thread Tran Tung
The response is from the james webadmin, The request looks normal. But that response for case when route (endpoint) was not installed. Sorry, I don't know why On 2/6/25 1:12 PM, Ilya Terskov wrote: lets try with yandex disk :) https://disk.yandex.ru/d/TSyMSKHlHSEzlw чт, 6 февр. 2025 г. в 13

Re: James Webadmin

2025-02-05 Thread Ilya Terskov
lets try with yandex disk :) https://disk.yandex.ru/d/TSyMSKHlHSEzlw чт, 6 февр. 2025 г. в 13:05, Tran Tung : > I don't see your screenshots > > On 2/6/25 11:24 AM, Ilya Terskov wrote: > > thanks but this not work, correct me if i am done wrong http request > > > > here screenshots curl and insom

Re: James Webadmin

2025-02-05 Thread Tran Tung
I don't see your screenshots On 2/6/25 11:24 AM, Ilya Terskov wrote: thanks but this not work, correct me if i am done wrong http request here screenshots curl and insomnia чт, 6 февр. 2025 г. в 10:34, Tran Tung : Hi, Bellow is syntax sample, that I extract from source code: (1)

Re: James Webadmin

2025-02-05 Thread Ilya Terskov
thanks but this not work, correct me if i am done wrong http request here screenshots curl and insomnia чт, 6 февр. 2025 г. в 10:34, Tran Tung : > Hi, > > Bellow is syntax sample, that I extract from source code: > > (1) > > Request method:POST > Request URI: > http://localhost:61390/users/j

Re: James Webadmin

2025-02-05 Thread Tran Tung
Hi, Bellow is syntax sample, that I extract from source code: (1) Request method:    POST Request URI: http://localhost:61390/users/jessy.jones%40domain.tld?action=deleteData Proxy:    Request params:    Query params:    action=deleteData Form params:    Path params:    Headers: