Webmail, Roundcube how they are installed?

Sebycp

Member
Nov 20, 2018
5
0
1
Bucharest
cPanel Access Level
Root Administrator
I would like to know how to Webmail and Roundcube are installed on a cPanel server.
I searched in apache conf. and i couldn`t find any directive like:
/Alias /usr/share/roundcube
or any roundcube conf that is included in cPanel .
Also how cPanel users acces /usr/share/roundcube if the suPHP handler is used? In suPHP you can`t acces folders and files if they dont have same UID and GID as the cPanel user...
Can someone provide more information ?
 

cPanelKenneth

cPanel Development
Staff member
Apr 7, 2006
4,607
79
458
cPanel Access Level
Root Administrator
The installation of Roundcube distributed with cPanel & WHM is to served via Apache. It is served by our internal service, cpsrvd.

What are you trying to do with Roundcube?
 
  • Like
Reactions: cPanelLauren

Sebycp

Member
Nov 20, 2018
5
0
1
Bucharest
cPanel Access Level
Root Administrator
I want to know how Roundcube is configured to work with Apache. I am trying to replicate on a separate server how is cPanel working.
Here is my Apache config for Roundcube:

Alias /roundcubemail /usr/share/roundcube

<Directory /usr/share/roundcube>
<IfModule mod_suphp.c>
suPHP_Engine On
suPHP_UserGroup httpd www
</IfModule>
</Directory>

<Directory /usr/share/roundcube/>
Options All
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch,FollowSymLinks
Require all granted

</Directory>

Is this safe? Runing suPHP as apache user for /usr/share/roundcube ?

Also in cPanel how is Roundcube configured with cpsrvd?
 

cPanelKenneth

cPanel Development
Staff member
Apr 7, 2006
4,607
79
458
cPanel Access Level
Root Administrator
cpsrvd serves all web applications as the logged in user. In the case of the webmail applications, the process is running as the user that owns the email account.

I'm not able to answer whether your suPHP configuration is safe. It does mean the application is running as the user httpd, with access to the www group. That gives it access to any file or directory on the system that httpd or www have access to. Without knowing your system configuration I cannot say if that is good, bad, or otherwise.

In general it is not recommended to serve content or applications as a shared user. Instead they should be server by a specific user, with restricted access to the system. That reduces the risk of server compromise if a web application is compromise (among other things).
 

Sebycp

Member
Nov 20, 2018
5
0
1
Bucharest
cPanel Access Level
Root Administrator
I know this but i want to use Roundcube globally. Its hard to create a separate roundcube install in the root folder of every user on the system :)) . This is my problem .
And to acces it globally i must use apache user... Any other ideas?
 

Sebycp

Member
Nov 20, 2018
5
0
1
Bucharest
cPanel Access Level
Root Administrator
I dont want a cPanel server. I want to understand how its Roundcube installed exactly and how it works through cpsrvd . Can i setup a service like cpsrvd myself? do you any tutorial or more info ?
 

sparek-3

Well-Known Member
Aug 10, 2002
2,045
230
368
cPanel Access Level
Root Administrator
So... you want the developers of a licensed piece of software to tell you how they operate? How they make money, so you can circumvent them?
 

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,295
1,273
313
Houston
Hi @Sebycp


While how cpsrvd works specifically as well as how internal services work may not be something that we're able to go into detail on, it may be helpful to check out the Roundcube help Roundcube Webmail Support They have a community forum here: Roundcube Community Forum - Index where I'm sure others have looked to configure their servers similarly as well.
 

Infopro

Well-Known Member
May 20, 2003
17,090
519
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
I dont want a cPanel server. I want to understand how its Roundcube installed exactly
Link below.

...and how it works through cpsrvd . Can i setup a service like cpsrvd myself?
It's not something you can install on a server sans cPanel though.
cpsrvd = cPanel Service Daemon

...do you any tutorial or more info ?
This link may be if some use to you:
tecmint.com/install-roundcube-webmail-on-centos-7