Multiple users on roundcube

madnoob2

Active Member
Apr 18, 2017
43
0
6
Austria
cPanel Access Level
Root Administrator
Hi folks,

we have more than 1 users for a single e-mail account inside our cPanel and they all use webmail on 2096 port.
Problem is when more than 1 user is logged in to the same e-mail account via roundcube the error appears : access denied.
My /usr/local/cpanel/logs/login_log says this :
9553483 HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect

How do I allow more than 1 user on the same e-mail account using roudcube?
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,301
363
Houston
Hi @madnoob2

Hi folks,

we have more than 1 users for a single e-mail account inside our cPanel and they all use webmail on 2096 port.
Problem is when more than 1 user is logged in to the same e-mail account via roundcube the error appears : access denied.
My /usr/local/cpanel/logs/login_log says this :
9553483 HTTP/1.1" DEFERRED LOGIN webmaild: security token incorrect

How do I allow more than 1 user on the same e-mail account using roudcube?
To start I want to implore you to NOT have more than one user in a webmail account at the same time as another, this is generally a bad idea. Furthermore, the user session relies on the security token remaining valid when a new user session is started a new security token is created for that user session.

The behavior of the webmail application is to disallow access from the old security token, I don't see a way around this, What you might want to do instead, if your users MUST use the same mailbox for some reason is look at utilizing a POP3/IMAP mail client for this.


Thanks!
 

madnoob2

Active Member
Apr 18, 2017
43
0
6
Austria
cPanel Access Level
Root Administrator
Hi @madnoob2



To start I want to implore you to NOT have more than one user in a webmail account at the same time as another, this is generally a bad idea. Furthermore, the user session relies on the security token remaining valid when a new user session is started a new security token is created for that user session.

The behavior of the webmail application is to disallow access from the old security token, I don't see a way around this, What you might want to do instead, if your users MUST use the same mailbox for some reason is look at utilizing a POP3/IMAP mail client for this.


Thanks!
Isn't roundcube an IMAP client anyway? There has to be an option to disable the security tokens.
I know it violates security laws but our customer does not really care, they need this to work.
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,301
363
Houston
Hello @madnoob2

Isn't roundcube an IMAP client anyway? There has to be an option to disable the security tokens.
I know it violates security laws but our customer does not really care, they need this to work.
It's an IMAP webmail client yes, I'm referring to local clients like Outlook or Thunderbird, as it stands now the functionality you want can't be implemented in Roundcube's webmail. If you'd like to see this in the product please feel free to open a feature request using the link in my signature.

Thanks!
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,261
463
Hello @madnoob2,

I've been unable to reproduce this problem when opening multiple tabs in the same browser and logging in via Roundcube with the same email account username. Can you confirm you are experiencing this behavior when using the same email account username? If so, can you create a new email account (e.g. [email protected]) and verify if you can reproduce the behavior on the test account?

Thank you.