Hello,

Is there a way to store c2s passwords in the database as MD5 hashes?  More 
to the point, is it easy to use an existing database full of usernames and 
MD5-hashed passwords?

The code I see does something else: it grabs the password from the 
database and determines if the password supplied by the client is equal to 
it, by doing a strcmp.  Is there a reason the code does this, rather than:

SELECT username FROM auth_db WHERE uesrname = 'josh' and realm = 
'home.com' and (password = 'securepass' OR password = md5('securepass'))

If I disable plain authentication does the client always send a MD5 
password?

Cheers,
-J

_______________________________________________
Jabberd2 mailing list
[email protected]
http://lists.xiaoka.com/listinfo.cgi/jabberd2-xiaoka.com

Reply via email to