hMailServer 6.2.5: default installs could not connect to their own database
-
hMailServer 6.2.5 fixed two faults that stopped a default install from connecting to its own database. Anyone who installed with the shipped defaults, an internal SQL Server Compact database with DPAPI secret protection, was affected.
Critical fixes
- DPAPI database-password truncation (SQL CE error 25028).
IniFileSettings::ReadIniSettingString_used a fixed 255-character buffer, soGetPrivateProfileStringtruncated the ~356-character DPAPI-protected database-password envelope. The truncated blob failed to decrypt, which yielded an empty password and SQL CE error 25028, Authentication failed. The buffer is now 4096 characters, which also covers long OAuth2 HMAC secrets and the password pepper. - Fresh-install database version, 6004 to 6005. The CreateTables scripts for MSSQL, MySQL and PostgreSQL still stamped
hm_dbversion = 6004while the server required 6005, so a brand-new install reported "database too old". SQL CE uses the MSSQL script, so it was caught by this too. Therecipientdsnnotifycolumn was already present. Only the version row was stale.
Validation
Checked end to end on a Windows Server 2025 Active Directory domain controller. A default internal-database install connects. AD authentication passes through COM
ValidatePasswordin both the DNSdomain.tldand NetBIOSDOMAIN\userforms, and through a real IMAP LOGIN, correct password returning OK and wrong returning NO.Control Panel
The .NET 8 WPF Control Panel (
hMailCP.exe) reached full settings parity with the classic Administrator here. The Server Status page (version, server state, database details, statistics, session counts, uptime, and a configuration-warnings panel that includes open-relay detection) and the per-account rule criteria and action editor are validated and wired into navigation.Windows x64 only: one installer,
hMailServer-6.2.5-x64.exe, bundling the server, the Control Panel and the .NET 8 Desktop Runtime bootstrapper. - DPAPI database-password truncation (SQL CE error 25028).
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login