1<!DOCTYPE html> 2<html lang="en-gb"> 3<head> 4 <meta charset="utf-8"> 5 <meta http-equiv="X-UA-Compatible" content="IE=edge"> 6 <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0"> 7 <meta name="theme-color" content="#F5D76E"/> 8 <meta http-equiv="Referrer-Policy" content="same-origin"> 9 <title>kkmail</title> 10 11 <link rel="stylesheet" href="/cache/630ee90d9270fbbf46a945d183c3d406da74ab20.css"> 12
12<script> 13 // check if darkmode is preferred by OS or set by localStorage 14 if (window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches && localStorage.getItem("mailcow_theme") !== "light" || 15 localStorage.getItem("mailcow_theme") === "dark") { 16 var head = document.getElementsByTagName('head')[0]; 17 var link = document.createElement('link'); 18 link.id = 'dark-mode-theme'; 19 link.rel = 'stylesheet'; 20 link.type = 'text/css'; 21 link.href = '/css/themes/mailcow-darkmode.css'; 22 head.appendChild(link); 23 } 24 </script>
24 25 26 <link rel="shortcut icon" href="/favicon.png" type="image/png"> 27 <link rel="icon" href="/favicon.png" type="image/png"> 28</head> 29<body> 30<div class="overlay"></div> 31 32<form action="/" method="post" id="logout"><input type="hidden" name="logout"></form> 33 34 35<div class="container flex-grow-1 my-4"> 36<div class="row mb-4" style="margin-top: 60px"> 37 <div class="col-12 col-md-7 col-lg-6 col-xl-5 ms-auto me-auto"> 38 39 <div class="card"> 40 <div class="card-header d-flex align-items-center text-break"> 41 <i class="bi bi-person-fill me-2"></i> Administrator Login 42 <div class="ms-auto form-check form-switch my-auto d-flex align-items-center"> 43 <label class="form-check-label"><i class="bi bi-moon-fill"></i></label> 44 <input class="form-check-input ms-2" type="checkbox" id="dark-mode-toggle"> 45 </div> 46 <div class="ms-4 d-grid d-sm-block"> 47 <button type="button" class="text-secondary btn p-0 border-0 bg-transparent ms-auto dropdown-toggle" data-bs-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> 48 <span class="flag-icon flag-icon-gb"></span> 49 </button> 50 <ul class="dropdown-menu ms-auto login"> 51 <li> 52 <a class="dropdown-item " href="?lang=bg-bg"> 53 <span class="flag-icon flag-icon-bg"></span>ÐÑлгаÑÑки (Bulgarian) 54 </a> 55 </li> 56 <li> 57 <a class="dropdown-item " href="?lang=cs-cz"> 58 <span class="flag-icon flag-icon-cz"></span>ÄeÅ¡tina (Czech) 59 </a> 60 </li> 61 <li> 62 <a class="dropdown-item " href="?lang=da-dk"> 63 <span class="flag-icon flag-icon-dk"></span>Dansk (Danish) 64 </a> 65 </li> 66 <li> 67 <a class="dropdown-item " href="?lang=de-de"> 68 <span class="flag-icon flag-icon-de"></span>Deutsch (German) 69 </a> 70 </li> 71 <li> 72 <a class="dropdown-item active" href="?lang=en-gb"> 73 <span class="flag-icon flag-icon-gb"></span>English 74 </a> 75 </li> 76 <li> 77 <a class="dropdown-item " href="?lang=es-es"> 78 <span class="flag-icon flag-icon-es"></span>Español (Spanish) 79 </a> 80 </li> 81 <li> 82 <a class="dropdown-item " href="?lang=fi-fi"> 83 <span class="flag-icon flag-icon-fi"></span>Suomi (Finish) 84 </a> 85 </li> 86 <li> 87 <a class="dropdown-item " href="?lang=fr-fr"> 88 <span class="flag-icon flag-icon-fr"></span>Français (French) 89 </a> 90 </li> 91 <li> 92 <a class="dropdown-item " href="?lang=gr-gr"> 93 <span class="flag-icon flag-icon-gr"></span>Îλληνικά (Greek) 94 </a> 95 </li> 96 <li> 97 <a class="dropdown-item " href="?lang=hu-hu"> 98 <span class="flag-icon flag-icon-hu"></span>Magyar (Hungarian) 99 </a> 100 </li> 101 <li> 102 <a class="dropdown-item " href="?lang=it-it"> 103 <span class="flag-icon flag-icon-it"></span>Italiano (Italian) 104 </a> 105 </li> 106 <li> 107 <a class="dropdown-item " href="?lang=ja-jp"> 108 <span class="flag-icon flag-icon-jp"></span>æ¥æ¬èª (Japanese) 109 </a> 110 </li> 111 <li> 112 <a class="dropdown-item " href="?lang=ko-kr"> 113 <span class="flag-icon flag-icon-kr"></span>íêµì´ (Korean) 114 </a> 115 </li> 116 <li> 117 <a class="dropdown-item " href="?lang=lv-lv">
118 <span class="flag-icon flag-icon-lv"></span>latvieÅ¡u (Latvian) 119 </a> 120 </li> 121 <li> 122 <a class="dropdown-item " href="?lang=lt-lt"> 123 <span class="flag-icon flag-icon-lt"></span>Lietuvių (Lithuanian) 124 </a> 125 </li> 126 <li> 127 <a class="dropdown-item " href="?lang=nb-no"> 128 <span class="flag-icon flag-icon-no"></span>Norsk (Norwegian) 129 </a> 130 </li> 131 <li> 132 <a class="dropdown-item " href="?lang=nl-nl"> 133 <span class="flag-icon flag-icon-nl"></span>Nederlands (Dutch) 134 </a> 135 </li> 136 <li> 137 <a class="dropdown-item " href="?lang=pl-pl"> 138 <span class="flag-icon flag-icon-pl"></span>JÄzyk Polski (Polish) 139 </a> 140 </li> 141 <li> 142 <a class="dropdown-item " href="?lang=pt-br"> 143 <span class="flag-icon flag-icon-br"></span>Português brasileiro (Brazilian Portuguese) 144 </a> 145 </li> 146 <li> 147 <a class="dropdown-item " href="?lang=pt-pt"> 148 <span class="flag-icon flag-icon-pt"></span>Português (Portuguese) 149 </a> 150 </li> 151 <li> 152 <a class="dropdown-item " href="?lang=ro-ro"> 153 <span class="flag-icon flag-icon-ro"></span>RomânÄ (Romanian) 154 </a> 155 </li> 156 <li> 157 <a class="dropdown-item " href="?lang=ru-ru"> 158 <span class="flag-icon flag-icon-ru"></span>PÑÑÑкий (Russian) 159 </a> 160 </li> 161 <li> 162 <a class="dropdown-item " href="?lang=si-si"> 163 <span class="flag-icon flag-icon-si"></span>SlovenÅ¡Äina (Slovenian) 164 </a> 165 </li> 166 <li> 167 <a class="dropdown-item " href="?lang=sk-sk"> 168 <span class="flag-icon flag-icon-sk"></span>SlovenÄina (Slovak) 169 </a> 170 </li> 171 <li> 172 <a class="dropdown-item " href="?lang=sv-se"> 173 <span class="flag-icon flag-icon-se"></span>Svenska (Swedish) 174 </a> 175 </li> 176 <li> 177 <a class="dropdown-item " href="?lang=tr-tr"> 178 <span class="flag-icon flag-icon-tr"></span>Türkçe (Turkish) 179 </a> 180 </li> 181 <li> 182 <a class="dropdown-item " href="?lang=uk-ua"> 183 <span class="flag-icon flag-icon-ua"></span>УкÑаÑнÑÑка (Ukrainian) 184 </a> 185 </li> 186 <li> 187 <a class="dropdown-item " href="?lang=uz-uz"> 188 <span class="flag-icon flag-icon-uz"></span>OÊ»zbekcha (Uzbek) 189 </a> 190 </li> 191 <li> 192 <a class="dropdown-item " href="?lang=vi-vn"> 193 <span class="flag-icon flag-icon-vn"></span>Tiếng Viá»t (Vietnamese) 194 </a> 195 </li> 196 <li> 197 <a class="dropdown-item " href="?lang=zh-cn"> 198 <span class="flag-icon flag-icon-cn"></span>ç®ä½ä¸æ (Simplified Chinese) 199 </a> 200 </li> 201 <li> 202 <a class="dropdown-item " href="?lang=zh-tw"> 203 <span class="flag-icon flag-icon-tw"></span>ç¹é«ä¸æ (Traditional Chinese) 204 </a> 205 </li> 206 </ul> 207 </div> 208 </div> 209 <div class="card-body"> 210 <div class="text-center mailcow-logo mb-4"> 211 <img class="main-logo" src="/img/cow_mailcow.svg" alt="mailcow"> 212 <img class="main-logo-dark" src="/img/cow_mailcow.svg" alt="mailcow-logo-dark"> 213 </div> 214 <form method="post" autofill="off"> 215 <div class="d-flex mt-3"> 216 <label class="visually-hidden" for="login_user">Username</label> 217 <div class="input-group"> 218 <div class="input-group-text">
218<i class="bi bi-person-fill"></i></div> 219 <input name="login_user" autocorrect="off" autocapitalize="none" type="text" id="login_user" class="form-control" placeholder="Username" required="" autofocus="" autocomplete="username"> 220 </div> 221 </div> 222 <div class="d-flex mt-3"> 223 <label class="visually-hidden" for="pass_user">Password</label> 224 <div class="input-group"> 225 <div class="input-group-text"><i class="bi bi-lock-fill"></i></div> 226 <input name="pass_user" type="password" id="pass_user" class="form-control" placeholder="Password" required="" autocomplete="current-password"> 227 </div> 228 </div> 229 <div class="d-flex justify-content-between mt-4" style="position: relative"> 230 <button type="submit" class="btn btn-xs-lg btn-success w-100 mt-2 mx-auto" style="max-width: 400px;" value="Login">Login</button> 231 </div> 232 </form> 233 <div class="hr-title"><strong>or login with</strong></div> 234 <div class="d-flex flex-column align-items-center"> 235 <a class="btn btn-xs-lg btn-secondary w-100" style="max-width: 400px;" href="#" id="fido2-login"><i class="bi bi-shield-fill-check"></i> FIDO2/WebAuthn Login</a> 236 </div> 237 <div class="my-4" id="fido2-alerts"></div> 238 </div> 239 </div> 240 241 <p class="text-center mt-3 text-muted" style="font-size: 0.9rem;"> 242 Not the correct login?<br> 243 <a href="/">Log in as user</a> | <a href="/domainadmin">Log in as domain admin</a> </p> 244 </div> 245</div> 246</div> 247 248<div id="ConfirmDeleteModal" class="modal fade" role="dialog"> 249 <div class="modal-dialog"> 250 <div class="modal-content"> 251 <div class="modal-header"> 252 <h3 class="modal-title">Confirm deletion</h3> 253 <button type="button" class="btn-close" data-bs-dismiss="modal"></button> 254 </div> 255 <div class="modal-body"> 256 <p id="DeleteText">Please confirm your changes to the following object id</p> 257 <ul id="ItemsToDelete"></ul> 258 <hr> 259 <button class="btn btn-sm btn-xs-half d-block d-sm-inline btn-danger" id="IsConfirmed">Delete now</button> 260 <button class="btn btn-sm btn-xs-half d-block d-sm-inline btn-secondary" id="isCanceled">Cancel</button> 261 </div> 262 </div> 263 </div> 264</div> 265<!-- version modal --> 266<div class="modal fade" id="showVersionModal" tabindex="-1" role="dialog" aria-hidden="true"> 267 <div class="modal-dialog modal-lg"> 268 <div class="modal-content"> 269 <div class="modal-header"> 270 <h5 class="modal-title"></h5> 271 <button type="button" class="btn-close" data-bs-dismiss="modal"></button> 272 </div> 273 <div class="modal-body d-flex flex-column mt-2 p-4"> 274 <div class="spinner-border mx-auto" role="status"> 275 <span class="visually-hidden">Loading...</span> 276 </div> 277 </div> 278 </div> 279 </div> 280</div><!-- version modal --> 281
282<script src="/cache/f75fc18841220092813e9074629be2caf3f65b5a.js"></script>
vendor: 1 bytes, line 282
282
283<script> 284 var lang_footer = {"cancel":"Cancel","confirm_delete":"Confirm deletion","delete_now":"Delete now","delete_these_items":"Please confirm your changes to the following object id","hibp_check":"Check against haveibeenpwned.com","hibp_nok":"Matched! This is a potentially dangerous password!","hibp_ok":"No match found.","loading":"Please wait...","nothing_selected":"Nothing selected","restart_container":"Restart container","restart_container_info":"<b>Important:<\/b> A graceful restart may take a while to complete, please wait for it to finish.","restart_now":"Restart now","restarting_container":"Restarting container, this may take a while"}; 285 var lang_acl = {"alias_domains":"Add alias domains","app_passwds":"Manage app passwords","bcc_maps":"BCC maps","delimiter_action":"Delimiter action","domain_desc":"Change domain description","domain_relayhost":"Change relayhost for a domain","eas_reset":"Reset EAS devices","extend_sender_acl":"Allow to extend sender ACL by external addresses","filters":"Filters","login_as":"Login as mailbox user","mailbox_relayhost":"Change relayhost for a mailbox","prohibited":"Prohibited by ACL","protocol_access":"Change protocol access","pushover":"Pushover","pw_reset":"Allow to reset mailcow user password","quarantine":"Quarantine actions","quarantine_attachments":"Quarantine attachments","quarantine_category":"Change quarantine notification category","quarantine_notification":"Change quarantine notifications","ratelimit":"Rate limit","recipient_maps":"Recipient maps","smtp_ip_access":"Change allowed hosts for SMTP","sogo_access":"Allow management of SOGo access","sogo_profile_reset":"Reset SOGo profile","spam_alias":"Temporary aliases","spam_policy":"Denylist\/Allowlist","spam_score":"Spam score","syncjobs":"Sync jobs","tls_policy":"TLS policy","unlimited_quota":"Unlimited quota for mailboxes"}; 286 var lang_tfa = {"authenticators":"Authenticators","api_register":"%s uses the Yubico Cloud API. Please get an API key for your key <a href=\"https:\/\/upgrade.yubico.com\/getapikey\/\" target=\"_blank\">here<\/a>","confirm":"Confirm","confirm_totp_token":"Please confirm your changes by entering the generated token","delete_tfa":"Disable TFA","disable_tfa":"Disable TFA until next successful login","force_tfa":"Force 2FA enrollment at login","force_tfa_info":"The user will be required to set up two-factor authentication before accessing the panel.","setup_title":"Two-Factor Authentication Required","setup_required":"Your account requires two-factor authentication. Please set up a 2FA method to continue.","cancel_setup":"Cancel and log out","enter_qr_code":"Your TOTP code if your device cannot scan QR codes","error_code":"Error code","init_webauthn":"Initializing, please wait...","key_id":"An identifier for your Device","key_id_totp":"An identifier for your key","none":"Deactivate","reload_retry":"- (reload browser if the error persists)","scan_qr_code":"Please scan the following code with your authenticator app or enter the code manually.","select":"Please select","set_tfa":"Set two-factor authentication method","start_webauthn_validation":"Start validation","tfa":"Two-factor authentication","tfa_token_invalid":"TFA token invalid","totp":"Time-based OTP (Google Authenticator, Authy, etc.)","u2f_deprecated":"It seems that your Key was registered using the deprecated U2F method. We will deactivate Two-Factor-Authenticaiton for you and delete your Key.","u2f_deprecated_important":"Please register your Key in the admin panel with the new WebAuthn method.","webauthn":"WebAuthn authentication","waiting_usb_auth":"<i>Waiting for USB device...<\/i><br><br>Please tap the button on your USB device now.","waiting_usb_register":"<i>Waiting for USB device...<\/i><br><br>Please enter your password above and confirm your registration by tapping the button on your USB device.","yubi_otp":"Yubico OTP authentication"}; 287 var lang_fido2 = {"confirm":"Confirm","fido2_auth":"Login with FIDO2","fido2_success":"Device successfully registered","fido2_validation_failed":"Validation failed","fn":"Friendly name","known_ids":"Known IDs","none":"Disabled","register_status":"Registration status","rename":"Rename","set_fido2":"Register FIDO2 device","set_fido2_touchid":"Register Touch ID on Apple M1","set_fn":"Set friendly name","start_fido2_val
287idation":"Start FIDO2 validation"}; 288 var lang_success = {"acl_saved":"ACL for object %s saved","admin_added":"Administrator %s has been added","admin_api_modified":"Changes to API have been saved","admin_modified":"Changes to administrator have been saved","admin_removed":"Administrator %s has been removed","alias_added":"Alias address %s (%d) has been added","alias_domain_removed":"Alias domain %s has been removed","alias_modified":"Changes to alias address %s have been saved","alias_removed":"Alias %s has been removed","aliasd_added":"Added alias domain %s","aliasd_modified":"Changes to alias domain %s have been saved","app_links":"Saved changes to app links","app_passwd_added":"Added new app password","app_passwd_removed":"Removed app password ID %s","bcc_deleted":"BCC map entries deleted: %s","bcc_edited":"BCC map entry %s edited","bcc_saved":"BCC map entry saved","cors_headers_edited":"CORS settings have been saved","custom_login_modified":"Login customisation was saved successfully","db_init_complete":"Database initialization completed","delete_filter":"Deleted filters ID %s","delete_filters":"Deleted filters: %s","deleted_syncjob":"Deleted syncjob ID %s","deleted_syncjobs":"Deleted syncjobs: %s","dkim_added":"DKIM key %s has been saved","domain_add_dkim_available":"A DKIM key did already exist","dkim_duplicated":"DKIM key for domain %s has been copied to %s","dkim_removed":"DKIM key %s has been removed","domain_added":"Added domain %s","domain_admin_added":"Domain administrator %s has been added","domain_admin_modified":"Changes to domain administrator %s have been saved","domain_admin_removed":"Domain administrator %s has been removed","domain_footer_modified":"Changes to domain footer %s have been saved","domain_modified":"Changes to domain %s have been saved","domain_removed":"Domain %s has been removed","dovecot_restart_success":"Dovecot was restarted successfully","eas_reset":"ActiveSync devices for user %s were reset","f2b_banlist_refreshed":"Banlist ID has been successfully refreshed.","f2b_modified":"Changes to Fail2ban parameters have been saved","forwarding_host_added":"Forwarding host %s has been added","forwarding_host_removed":"Forwarding host %s has been removed","global_filter_written":"Filter was successfully written to file","hash_deleted":"Hash deleted","iam_test_connection":"Connection successful","ip_check_opt_in_modified":"IP check was saved successfully","item_deleted":"Item %s successfully deleted","item_released":"Item %s released","items_deleted":"Item %s successfully deleted","items_released":"Selected items were released","learned_ham":"Successfully learned ID %s as ham","license_modified":"Changes to license have been saved","logged_in_as":"Logged in as %s","mailbox_added":"Mailbox %s has been added","mailbox_modified":"Changes to mailbox %s have been saved","mailbox_removed":"Mailbox %s has been removed","mailbox_renamed":"Mailbox was renamed from %s to %s","nginx_reloaded":"Nginx was reloaded","object_modified":"Changes to object %s have been saved","password_policy_saved":"Password policy was saved successfully","password_changed_success":"Password was successfully changed","pushover_settings_edited":"Pushover settings successfully set, please verify credentials.","qlearn_spam":"Message ID %s was learned as spam and deleted","queue_command_success":"Queue command completed successfully","recipient_map_entry_deleted":"Recipient map ID %s has been deleted","recipient_map_entry_saved":"Recipient map entry \"%s\" has been saved","recovery_email_sent":"Recovery email sent to %s","relayhost_added":"Map entry %s has been added","relayhost_removed":"Map entry %s has been removed","reset_main_logo":"Reset to default logo","resource_added":"Resource %s has been added","resource_modified":"Changes to mailbox %s have been saved","resource_removed":"Resource %s has been removed","rl_saved":"Rate limit for object %s saved","rspamd_ui_pw_set":"Rspamd UI password successfully set","saved_settings":"Saved settings","settings_map_added":"Added settings map entry","settings_map_removed":"Removed settings map ID %s","sogo_profile_reset"
288:"SOGo profile for user %s was reset","template_added":"Added template %s","template_modified":"Changes to template %s have been saved","template_removed":"Template ID %s has been deleted","tls_policy_map_entry_deleted":"TLS policy map ID %s has been deleted","tls_policy_map_entry_saved":"TLS policy map entry \"%s\" has been saved","ui_texts":"Saved changes to UI texts","upload_success":"File uploaded successfully","verified_fido2_login":"Verified FIDO2 login","verified_totp_login":"Verified TOTP login","verified_webauthn_login":"Verified WebAuthn login","verified_yotp_login":"Verified Yubico OTP login"}; 289 var lang_danger = {"access_denied":"Access denied or invalid form data","tfa_removal_blocked":"Two-factor authentication cannot be removed because it is required for your account.","alias_domain_invalid":"Alias domain %s is invalid","alias_empty":"Alias address must not be empty","alias_goto_identical":"Alias and goto address must not be identical","alias_invalid":"Alias address %s is invalid","aliasd_targetd_identical":"Alias domain must not be equal to target domain: %s","aliases_in_use":"Max. aliases must be greater or equal to %d","app_name_empty":"App name cannot be empty","app_passwd_id_invalid":"App password ID %s invalid","authsource_in_use":"The identity provider cannot be changed or deleted as it is currently in use by one or more users.","bcc_empty":"BCC destination cannot be empty","bcc_exists":"A BCC map %s exists for type %s","bcc_must_be_email":"BCC destination %s is not a valid email address","comment_too_long":"Comment too long, max 160 chars allowed","cors_invalid_method":"Invalid Allow-Method specified","cors_invalid_origin":"Invalid Allow-Origin specified","defquota_empty":"Default quota per mailbox must not be 0.","demo_mode_enabled":"Demo Mode is enabled","description_invalid":"Resource description for %s is invalid","dkim_domain_or_sel_exists":"A DKIM key for \"%s\" exists and will not be overwritten","dkim_domain_or_sel_invalid":"DKIM domain or selector invalid: %s","domain_cannot_match_hostname":"Domain cannot match hostname","domain_exists":"Domain %s already exists","domain_invalid":"Domain name is empty or invalid","domain_not_empty":"Cannot remove non-empty domain %s","domain_not_found":"Domain %s not found","domain_quota_m_in_use":"Domain quota must be greater or equal to %s MiB","extended_sender_acl_denied":"missing ACL to set external sender addresses","extra_acl_invalid":"External sender address \"%s\" is invalid","extra_acl_invalid_domain":"External sender \"%s\" uses an invalid domain","fido2_verification_failed":"FIDO2 verification failed: %s","file_open_error":"File cannot be opened for writing","filter_type":"Wrong filter type","from_invalid":"Sender must not be empty","generic_server_error":"An unexpected server error occurred. Please contact your administrator.","global_filter_write_error":"Could not write filter file: %s","global_map_invalid":"Global map ID %s invalid","global_map_write_error":"Could not write global map ID %s: %s","goto_empty":"An alias address must contain at least one valid goto address","goto_invalid":"Goto address %s is invalid","ham_learn_error":"Ham learn error: %s","iam_test_connection":"Connection failed","imagick_exception":"Error: Imagick exception while reading image","img_dimensions_exceeded":"Image exceeds the maximum image size","img_invalid":"Cannot validate image file","img_size_exceeded":"Image exceeds the maximum file size","img_tmp_missing":"Cannot validate image file: Temporary file not found","invalid_bcc_map_type":"Invalid BCC map type","invali
289d_destination":"Destination format \"%s\" is invalid","invalid_filter_type":"Invalid filter type","invalid_host":"Invalid host specified: %s","invalid_mime_type":"Invalid mime type","invalid_nexthop":"Next hop format is invalid","invalid_nexthop_authenticated":"Next hop exists with different credentials, please update the existing credentials for this next hop first.","invalid_recipient_map_new":"Invalid new recipient specified: %s","invalid_recipient_map_old":"Invalid original recipient specified: %s","invalid_reset_token":"Invalid reset token","ip_list_empty":"List of allowed IPs cannot be empty","is_alias":"%s is already known as an alias address","is_alias_or_mailbox":"%s is already known as an alias, a mailbox or an alias address expanded from an alias domain.","is_spam_alias":"%s is already known as a temporary alias address (spam alias address)","last_key":"Last key cannot be deleted, please deactivate TFA instead.","login_failed":"Login failed","mailbox_defquota_exceeds_mailbox_maxquota":"Default quota exceeds max quota limit","mailbox_invalid":"Mailbox name is invalid","mailbox_quota_exceeded":"Quota exceeds the domain limit (max. %d MiB)","mailbox_quota_exceeds_domain_quota":"Max. quota exceeds domain quota limit","mailbox_quota_left_exceeded":"Not enough space left (space left: %d MiB)","mailboxes_in_use":"Max. mailboxes must be greater or equal to %d","malformed_username":"Malformed username","map_content_empty":"Map content cannot be empty","max_age_invalid":"Max age %s is invalid","max_alias_exceeded":"Max. aliases exceeded","max_mailbox_exceeded":"Max. mailboxes exceeded (%d of %d)","max_quota_in_use":"Mailbox quota must be greater or equal to %d MiB","maxquota_empty":"Max. quota per mailbox must not be 0.","mode_invalid":"Mode %s is invalid","mx_invalid":"MX record %s is invalid","mysql_error":"MySQL error: %s","network_host_invalid":"Invalid network or host: %s","next_hop_interferes":"%s interferes with nexthop %s","next_hop_interferes_any":"An existing next hop interferes with %s","nginx_reload_failed":"Nginx reload failed: %s","no_user_defined":"No user defined","object_exists":"Object %s already exists","object_is_not_numeric":"Value %s is not numeric","password_complexity":"Password does not meet the policy","password_empty":"Password must not be empty","password_mismatch":"Confirmation password does not match","password_reset_invalid_user":"Mailbox not found or no recovery email is set","password_reset_na":"The password recovery is currently unavailable. Please contact your administrator.","policy_list_from_exists":"A record with given name exists","policy_list_from_invalid":"Record has invalid format","private_key_error":"Private key error: %s","pushover_credentials_missing":"Pushover token and or key missing","pushover_key":"Pushover key has a wrong format","pushover_token":"Pushover token has a wrong format","quarantine_category_invalid":"Quarantine category must be one of: add_header, reject, all","quota_not_0_not_numeric":"Quota must be numeric and >= 0","recipient_map_entry_exists":"A Recipient map entry \"%s\" exists","recovery_email_failed":"Could not send a recovery email. Please contact your administrator.","redis_error":"Redis error: %s","relayhost_invalid":"Map entry %s is invalid","release_send_failed":"Message could not be released: %s","required_data_missing":"Required data %s is missing","reset_f2b_regex":"Regex filter could not be reset in time, please try again or wait a few more seconds and reload the website.","reset_token_limit_exceeded":"Reset token limit has been exceeded. Please try again later.","resource_invalid":"Resource name %s is invalid","rl_timeframe":"Rate limit time frame is incorrect","rspamd_ui_pw_length":"Rspamd UI password should be at least 6 chars long","script_empty":"Script cannot be empty","sender_acl_invalid":"Sender ACL value %s is invalid","set_acl_failed":"Failed to set ACL","settings_map_invalid":"Settings map ID %s invalid","sieve_error":"Sieve parser error: %s","spam_learn_error":"Spam learn error: %s","subject_empty":"Subject must not be empty","target_domain_invali
289d":"Target domain %s is invalid","targetd_not_found":"Target domain %s not found","targetd_relay_domain":"Target domain %s is a relay domain","template_exists":"Template %s already exists","template_id_invalid":"Template ID %s invalid","template_name_invalid":"Template name invalid","temp_error":"Temporary error","text_empty":"Text must not be empty","tfa_token_invalid":"TFA token invalid","tls_policy_map_dest_invalid":"Policy destination is invalid","tls_policy_map_entry_exists":"A TLS policy map entry \"%s\" exists","tls_policy_map_parameter_invalid":"Policy parameter is invalid","to_invalid":"Recipient must not be empty","totp_verification_failed":"TOTP verification failed","transport_dest_exists":"Transport destination \"%s\" exists","webauthn_verification_failed":"WebAuthn verification failed: %s","webauthn_authenticator_failed":"The selected authenticator was not found","webauthn_publickey_failed":"No public key was stored for the selected authenticator","webauthn_username_failed":"The selected authenticator belongs to another account","unknown":"An unknown error occurred","unknown_tfa_method":"Unknown TFA method","unlimited_quota_acl":"Unlimited quota prohibited by ACL","username_invalid":"Username %s cannot be used","validity_missing":"Please assign a period of validity","value_missing":"Please provide all values","version_invalid":"Version %s is invalid","yotp_verification_failed":"Yubico OTP verification failed: %s"}; 290 var docker_timeout = 60 * 1000; 291 var mailcow_cc_role = ''; 292 var mailcow_info = { 293 version_tag: '', 294 last_version_tag: '', 295 updatedAt: '', 296 project_url: '', 297 project_owner: '', 298 project_repo: '', 299 branch: '' 300 }; 301 302$(window).scroll(function() { 303 sessionStorage.scrollTop = $(this).scrollTop(); 304}); 305// Select language and reopen active URL without POST 306function setLang(sel) { 307 $.post( '\/admin\/', {lang: sel} ); 308 window.location.href = window.location.pathname + window.location.search; 309} 310// FIDO2 functions 311function arrayBufferToBase64(buffer) { 312 let binary = ''; 313 let bytes = new Uint8Array(buffer); 314 let len = bytes.byteLength; 315 for (let i = 0; i < len; i++) { 316 binary += String.fromCharCode( bytes[ i ] ); 317 } 318 return window.btoa(binary); 319} 320function recursiveBase64StrToArrayBuffer(obj) { 321 let prefix = '=?BINARY?B?'; 322 let suffix = '?='; 323 if (typeof obj === 'object') { 324 for (let key in obj) { 325 if (typeof obj[key] === 'string') { 326 let str = obj[key]; 327 if (str.substring(0, prefix.length) === prefix && str.substring(str.length - suffix.length) === suffix) { 328 str = str.substring(prefix.length, str.length - suffix.length); 329 let binary_string = window.atob(str); 330 let len = binary_string.length; 331 let bytes = new Uint8Array(len); 332 for (let i = 0; i < len; i++) { 333 bytes[i] = binary_string.charCodeAt(i); 334 } 335 obj[key] = bytes.buffer; 336 } 337 } else { 338 recursiveBase64StrToArrayBuffer(obj[key]); 339 } 340 } 341 } 342} 343 $(window).on('load', function() { 344 $(".overlay").hide(); 345 }); 346 $(document).ready(function() { 347 $(document).on('shown.bs.modal', function(e) { 348 modal_id = $(e.relatedTarget).data('target'); 349 $(modal_id).attr("aria-hidden","false"); 350 }); 351 // TFA, CSRF, Alerts in footer.inc.php 352 // Other general functions in mailcow.js 353 354 // Confirm TFA modal 355 356 357 358 359 // Validate FIDO2 360 $("#fido2-login").click(function(){ 361 $('#fido2-alerts').html(); 362 if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { 363 window.alert('Browser not supported.'); 364 return; 365 } 366 window.fetch("/api/v1/get/fido2-get-args", {method:'GET',cache:'no-cache'}).then(function(response) { 367 return response.json(); 368 }).then(function(json) { 369 if (json.success === false) { 370 throw new Error(); 371 } 372 recursiveBase64StrToArrayBuffer(json); 373 return json; 374 }).then(function(getCredentialArgs) { 375 return navigator.credentials.get(getCredentialArgs); 376 }).then(function(cred) { 377 return { 378 id: cred.rawId ? arrayBufferToBase64(cred.rawId) : null, 379 clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, 380 authenticatorData: cred.response.authenticatorData ? arrayBufferToBase64(cred.response.authenticatorData) : null, 381 signature : cred.response.signature ? arrayBufferToBase64(cred.response.signature) : null 382 }; 383 }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) { 384 var formData = new FormData(); 385 formData.append("token", AuthenticatorAttestationResponse); 386 formData.append("verify_fido2_login", "true"); 387 388 return window.fetch(window.location.href, {method:'POST', body: formData, cache:'no-cache'}); 389 }).then(function(response) { 390 window.location = window.location.href.split("#")[0]; 391 }).catch(function(err) { 392 if (typeof err.message === 'undefined') {
393 mailcow_alert_box(lang_fido2.fido2_validation_failed, "danger"); 394 } else { 395 mailcow_alert_box(lang_fido2.fido2_validation_failed + ":<br><i>" + err.message + "</i>", "danger"); 396 } 397 }); 398 }); 399 // Set TFA/FIDO2 400 $("#register-fido2, #register-fido2-touchid").click(function(){ 401 let t = $(this); 402 403 $("option:selected").prop("selected", false); 404 if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { 405 window.alert('Browser not supported.'); 406 return; 407 } 408 409 window.fetch("/api/v1/get/fido2-registration/null", {method:'GET',cache:'no-cache'}).then(function(response) { 410 return response.json(); 411 }).then(function(json) { 412 if (json.success === false) { 413 throw new Error(json.msg); 414 } 415 recursiveBase64StrToArrayBuffer(json); 416 417 // set attestation to node if we are registering apple touch id 418 if(t.attr('id') === 'register-fido2-touchid') { 419 json.publicKey.attestation = 'none'; 420 json.publicKey.authenticatorSelection.authenticatorAttachment = "platform"; 421 } 422 423 return json; 424 }).then(function(createCredentialArgs) { 425 console.log(createCredentialArgs); 426 return navigator.credentials.create(createCredentialArgs); 427 }).then(function(cred) { 428 return { 429 clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, 430 attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null 431 }; 432 }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) { 433 return window.fetch("/api/v1/add/fido2-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'}); 434 }).then(function(response) { 435 return response.json(); 436 }).then(function(json) { 437 if (json.success) { 438 window.location = window.location.href.split("#")[0]; 439 } else { 440 throw new Error(json.msg); 441 } 442 }).catch(function(err) { 443 $('#fido2-alerts').html('<span class="text-danger"><b>' + err.message + '</b></span>'); 444 }); 445 }); 446 $('#selectTFA').change(function () { 447 if ($(this).val() == "yubi_otp") { 448 $('#YubiOTPModal').modal('show'); 449 $("option:selected").prop("selected", false); 450 } 451 if ($(this).val() == "totp") { 452 $('#TOTPModal').modal('show'); 453 request_token = $('#tfa-qr-img').data('totp-secret'); 454 $.ajax({ 455 url: '/inc/ajax/qr_gen.php', 456 data: { 457 token: request_token, 458 }, 459 }).done(function (result) { 460 $("#tfa-qr-img").attr("src", result); 461 }); 462 $("option:selected").prop("selected", false); 463 } 464 if ($(this).val() == "webauthn") { 465 // check if Browser is supported 466 if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { 467 window.alert('Browser not supported.'); 468 return; 469 } 470 471 // show modal 472 $('#WebAuthnModal').modal('show'); 473 $("option:selected").prop("selected", false); 474 475 $("#start_webauthn_register").click(() => { 476 var key_id = document.getElementsByName('key_id')[1].value; 477 var confirm_password = document.getElementsByName('confirm_password')[1].value; 478 479 // fetch WebAuthn create args 480 window.fetch("/api/v1/get/webauthn-tfa-registration/null", {method:'GET',cache:'no-cache'}).then(response => { 481 return response.json(); 482 }).then(json => { 483 console.log(json); 484 if (json.success === false) throw new Error(json.msg); 485 recursiveBase64StrToArrayBuffer(json); 486 487 return json; 488 }).then(createCredentialArgs => { 489 // create credentials 490 return navigator.credentials.create(createCredentialArgs); 491 }).then(cred => { 492 return { 493 clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, 494 attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null, 495 key_id: key_id, 496 tfa_method: "webauthn", 497 confirm_password: confirm_password 498 }; 499 }).then(JSON.stringify).then(AuthenticatorAttestationResponse => { 500 // send request 501 return window.fetch("/api/v1/add/webauthn-tfa-registration", {method:'POST', body: AuthenticatorAttestationResponse, cache:'no-cache'}); 502 }).then(response => { 503 return response.json(); 504 }).then(json => { 505 if (json.success) { 506 // reload on success 507 window.location = window.location.href.split("#")[0]; 508 } else { 509 throw new Error(json.msg); 510 } 511 }).catch(function(err) { 512 console.log(err); 513 var webauthn_return_code = document.getElementById('webauthn_return_code'); 514 webauthn_return_code.style.display = webauthn_return_code.style.display === 'none' ? '' : null; 515 webauthn_return_code.innerHTML = lang_tfa.error_code + ': ' + err + ' ' + lang_tfa.reload_retry; 516 }); 517 }); 518 } 519 if ($(this).val() == "none") { 520 $('#DisableTFAModal').modal('show'); 521 $("option:selected").prop("selected", false); 522 } 523 }); 524 525 526 // CSRF 527 $('<input type="hidden" value="c822e7d8efa58410986a37c6d794bca523950084157508b4479642f19accda6f">').attr('name', 'csrf_token').appendTo('form'); 528 if (sessionStorage.scrollTop != "undefined") { 529 $(window).scrollTop(sessionStorage.scrollTop); 530 } 531 }); 532</script>
532 533 534<div class="container footer"> 535 </div> 536</body> 537</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.