Webmail, Roundcube how they are installed?

[Sebycp]

I would like to know how to Webmail and Roundcube are installed on a cPanel server.
I searched in apache conf. and i couldn`t find any directive like:
/Alias /usr/share/roundcube
or any roundcube conf that is included in cPanel .
Also how cPanel users acces /usr/share/roundcube if the suPHP handler is used? In suPHP you can`t acces folders and files if they dont have same UID and GID as the cPanel user...
Can someone provide more information ?

 

[cPanelKenneth]

The installation of Roundcube distributed with cPanel & WHM is to served via Apache. It is served by our internal service, cpsrvd.

What are you trying to do with Roundcube?

 

[Sebycp]

I want to know how Roundcube is configured to work with Apache. I am trying to replicate on a separate server how is cPanel working.
Here is my Apache config for Roundcube:

Alias /roundcubemail /usr/share/roundcube

<Directory /usr/share/roundcube>
<IfModule mod_suphp.c>
suPHP_Engine On
suPHP_UserGroup httpd www
</IfModule>
</Directory>

<Directory /usr/share/roundcube/>
Options All
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch,FollowSymLinks
Require all granted

</Directory>

Is this safe? Runing suPHP as apache user for /usr/share/roundcube ?

Also in cPanel how is Roundcube configured with cpsrvd?

 

[cPanelKenneth]

cpsrvd serves all web applications as the logged in user. In the case of the webmail applications, the process is running as the user that owns the email account.

I'm not able to answer whether your suPHP configuration is safe. It does mean the application is running as the user httpd, with access to the www group. That gives it access to any file or directory on the system that httpd or www have access to. Without knowing your system configuration I cannot say if that is good, bad, or otherwise.

In general it is not recommended to serve content or applications as a shared user. Instead they should be server by a specific user, with restricted access to the system. That reduces the risk of server compromise if a web application is compromise (among other things).

 

[Sebycp]

I know this but i want to use Roundcube globally. Its hard to create a separate roundcube install in the root folder of every user on the system ) . This is my problem .
And to acces it globally i must use apache user... Any other ideas?

 

[Infopro]

Any other ideas?

Get a server with cPanel on it?

 

[Sebycp]

I dont want a cPanel server. I want to understand how its Roundcube installed exactly and how it works through cpsrvd . Can i setup a service like cpsrvd myself? do you any tutorial or more info ?

 

[sparek-3]

So... you want the developers of a licensed piece of software to tell you how they operate? How they make money, so you can circumvent them?

 

[cPanelLauren]

Hi @Sebycp


While how cpsrvd works specifically as well as how internal services work may not be something that we're able to go into detail on, it may be helpful to check out the Roundcube help Roundcube Webmail Support They have a community forum here: Roundcube Community Forum - Index where I'm sure others have looked to configure their servers similarly as well.

 

[Sebycp]

No i dont want money. I want knowledge. I am just curious. You think only money is important in this world sparek-3 ?

 

[Infopro]

I dont want a cPanel server. I want to understand how its Roundcube installed exactly

Link below.

...and how it works through cpsrvd . Can i setup a service like cpsrvd myself?

It's not something you can install on a server sans cPanel though.
cpsrvd = cPanel Service Daemon

...do you any tutorial or more info ?

This link may be if some use to you:
tecmint.com/install-roundcube-webmail-on-centos-7