# webmail opens wrong user folder

**URL:** <https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093>\
**Category:** Usermin\
**Created:** [July 28, 2011, 3:41pm UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093 "2011-07-28T15:41:32Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![gsmithe](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/g/7bcc69/32.png) [@gsmithe](https://forum.virtualmin.com/u/gsmithe)\
**Post date:** [July 28, 2011, 3:41pm UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/1 "2011-07-28T15:41:32Z")

</div>

I apologize if this is posted elsewhere, but I couldn’t find a similar thread.

I have this info 2nd hand from another admin, but will explain to my best ability. I feel this may actually turn into a bug report, but we’ll see,

we host multiple domains on this server, just for email handling.

One user logged into usermin’s webmail, but was shown the email of another user within the same domain.  
Using roundcube, the problem doesn’t exist.

Our admin tried the same procedure and verified the behavior.

Both user accounts start with “k” and they /unfortunately/ have the same password.

Our “fix” was to change her password. This allowed mail to display properly. Her password was then changed back to the original value, and the problem has remained “fixed.”

Hopefully this makes sense, and is obviously a security problem. If there is anything I need to do different, please let me know.

The system is a CentOS 5.6 box running virtualmin GPL. All virtualmin components were installed via the official script.

Thanks,

GS

---

<div class="post-metadata">

**Author:** ![AllanIT](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/7c8e57/32.png) [@AllanIT](https://forum.virtualmin.com/u/AllanIT)\
**Post date:** [August 11, 2011, 4:17pm UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/2 "2011-08-11T16:17:52Z")

</div>

I have noticed this same problem since the new update of usermin.

---

<div class="post-metadata">

**Author:** ![AllanIT](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/7c8e57/32.png) [@AllanIT](https://forum.virtualmin.com/u/AllanIT)\
**Post date:** [August 12, 2011, 9:30am UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/3 "2011-08-12T09:30:57Z")

</div>

Just so it does not get reported twice I have reported this as a bug

AllanIT

---

<div class="post-metadata">

**Author:** ![AllanIT](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/7c8e57/32.png) [@AllanIT](https://forum.virtualmin.com/u/AllanIT)\
**Post date:** [August 13, 2011, 3:30am UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/4 "2011-08-13T03:30:27Z")

</div>

Hi guys

In my case this conflict was between the root user on the server and another email account I have, also my OS is ubuntu 10.04 so these instructions may or may not work for you but the response is from Jamie Cameron and fixed my problem. I hope this helps you as well.

Allan

from Jamie Cameron

Sounds like the root user’s usermin account has been configured to login as a different IMAP user.

Does the file /root/.usermin/mailbox/inbox.imap exist, and if so what does it contain?

If it contains some other user’s login, you should just delete that file.

---

<div class="post-metadata">

**Author:** ![gsmithe](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/g/7bcc69/32.png) [@gsmithe](https://forum.virtualmin.com/u/gsmithe)\
**Post date:** [August 17, 2011, 5:56pm UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/5 "2011-08-17T17:56:32Z")

</div>

Allan,

Thanks for the post, but that didn’t help me, as I don’t have that file.

GS

---

<div class="post-metadata">

**Author:** ![aplima](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/a/dbc845/32.png) [@aplima](https://forum.virtualmin.com/u/aplima)\
**Post date:** [July 22, 2014, 6:23pm UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/6 "2014-07-22T18:23:58Z")

</div>

I’m going through the same problem.  
And I have hundreds of mboxes…  
This happened after I restore backups to a new server.  
Would I need to go over every user mailbox to fix it?  
Did the restore almost two weeks ago. Now a couple user complained, and then a couple more.  
That’s how I found out that a lot of them are reading emails from another user…  
I’m still trying to figure if this is happening only between users of same domain. If not, well I’m in a big problem now…

---

<div class="post-metadata">

**Author:** ![s3cur3f0undati0ns](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/s/3ec8ea/32.png) [@s3cur3f0undati0ns](https://forum.virtualmin.com/u/s3cur3f0undati0ns)\
**Post date:** [July 27, 2014, 4:23am UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/7 "2014-07-27T04:23:22Z")

</div>

I am having the same issue. Running CentOS Linux 5.8, Virtualmin version 3.90 Pro. A few weeks ago someone (user#1) in a particular domain was logging in and receiving the mail of someone else (user#2)from the same domain. Today user #3 from the same domain is logging in and receiving the mail of user #2. Any ideas on how to fix this? User #3 was using IMAP and will have lost 2.5 years worth of mail if I cannot straighten this out.

Thank you

---

<div class="post-metadata">

**Author:** ![s3cur3f0undati0ns](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/s/3ec8ea/32.png) [@s3cur3f0undati0ns](https://forum.virtualmin.com/u/s3cur3f0undati0ns)\
**Post date:** [July 27, 2014, 4:52am UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/8 "2014-07-27T04:52:15Z")

</div>

I used the suggestion from gsmithe except I didn’t even change the password to a different value and then back again. I just updated the password with the existing password and that was enough to “fix it”.

---

<div class="post-metadata">

**Author:** ![system](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/cd96d761e326db4b2bef94886a639109bd7a8e76.svg) [@system](https://forum.virtualmin.com/u/system)\
**Post date:** [April 30, 2020, 5:39am UTC](https://forum.virtualmin.com/t/webmail-opens-wrong-user-folder/40093/9 "2020-04-30T05:39:56Z")

</div>

Closed on April 30, 2020, 5:39am UTC


