From bd0134974e5498cd09f00b872e67990caa5d7105 Mon Sep 17 00:00:00 2001 From: Marco Bettini Date: Fri, 28 Nov 2025 15:35:14 +0100 Subject: [PATCH] settings: passdb_default_password_scheme - Default changes from PLAIN to CRYPT --- data/settings.js | 9 +++++++-- data/updates.js | 1 + docs/installation/upgrade/2.4-to-2.4.x.md | 3 +++ 3 files changed, 11 insertions(+), 2 deletions(-) diff --git a/data/settings.js b/data/settings.js index 9d9a93b02..17a47ed70 100644 --- a/data/settings.js +++ b/data/settings.js @@ -9464,8 +9464,13 @@ If yes, import all fields returned by the passdb lookup. If no, require tags: [ 'passdb' ], values: setting_types.STRING, default: { - value: 'PLAIN', - text: 'specific [[link,passdb]] have different defaults', + value: 'CRYPT', + text: `specific [[link,passdb]] have different defaults
+\`passdb_static\`: \`PLAIN\``, + }, + changed: { + settings_passdb_default_password_scheme_changed: ` +Changed from \`PLAIN\` to \`CRYPT\`.` }, text: ` The scheme that passwords are in the passdb, unless overridden by the passdb diff --git a/data/updates.js b/data/updates.js index d057ec360..645b72073 100644 --- a/data/updates.js +++ b/data/updates.js @@ -157,6 +157,7 @@ export const updates = { settings_mailbox_directory_name_legacy_deprecated: '2.4.2', settings_mailbox_special_use_changed: '2.4.0', settings_metric_fields_changed: '2.4.0', + settings_passdb_default_password_scheme_changed: '2.4.3', settings_passdb_mechanisms_filter_added: '2.4.0', settings_passdb_static_password_added: '2.4.0', settings_ssl_client_ca_added: '2.4.0', diff --git a/docs/installation/upgrade/2.4-to-2.4.x.md b/docs/installation/upgrade/2.4-to-2.4.x.md index bb4b852d2..7b7e1bcd6 100644 --- a/docs/installation/upgrade/2.4-to-2.4.x.md +++ b/docs/installation/upgrade/2.4-to-2.4.x.md @@ -53,6 +53,9 @@ changed to `2.4.3`. | ------- | ----------------- | ----------------- | | [[setting,lazy_expunge_only_last_instance]] | `no` | `yes` | | [[setting,mail_access_groups]] | | [[setting,default_internal_group]] | +| [[setting,passdb_default_password_scheme]] | `PLAIN` | `CRYPT` | +| `passdb_passwd_file/passdb_default_password_scheme` | `PLAIN` | `CRYPT` | +| `passdb_sql/passdb_default_password_scheme` | `PLAIN` | `CRYPT` | | `service/doveadm/service_extra_groups` | [[setting,default_internal_group]] | | | `service/imap/service_extra_groups` | [[setting,default_internal_group]] | | | `service/imap-urlauth-worker/service_extra_groups` | [[setting,default_internal_group]] | |