Hi there,

I checked out the new authmysql-Functions to use an "own" SQL-
Statement for authentication.

It seems that its rather badly documented, also there are errors
in authlib/authmysqlrc source file:

| ##NAME: MYSQL_SELECT_CLAUSE:0
[...]
| # be used to do a SELECT operation on database, which should return fields
| # in order specified bellow:
| #
| # username, cryptpw, uid, gid, clearpw, home, maildir, quota, fullname

This is definitely wrong, as the order has to be:
username, cryptpw, clearpw, uid, gid, home, maildir, quota, fullname

The example given uses \ as line concat char, which didn't work. After
writing the complete statement into one single line, it did fine.
It SHOULD be noted that either cryptpw or clearpw could be set to ''
to disable the usage, f.ex: "select source,'',passwd,69,69,..." to only
use cleartext passwords from the database (needed for CRAM...).

Also, I want to note that the "DEFAULT_DOMAIN" MUST BE set to something if
using MYSQL_SELECT_CLAUSE. If left empty, there will be NO authentication.
This should be written down (or better: this need to be removed).

As there is no debug output in the auth-module (like in the complete
courier suite...) it took me about half a day to tcpdump and printf-debug,
reading sources [...] to find out why it had not worked. Perhaps there's
some need of a more detailed logging capability? ;)

Btw, have I missed something, or is there really NO documentation?
I did a "find .|xargs grep MYSQL_SELECT", and theres just nothing than the
sourcefiles and the (wrong) authmysqlrc. The README.authmysql.myownquery
is only a technical info of the c-functions, nothing about how-to-config.

Btw: _REALLY_GREAT_. This makes authmysql the swiss army knife (and also
removes the need for all patches I did to this module) ;)

Cu, Oliver


_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to