On Jan 7, 2008, at 12:23 AM, Johannes Weberhofer, Weberhofer GmbH wrote:

I have changed the field-size to VARCHAR(1), so I can give the users who have forgotten their password a hint, but I do not see the real passwords

As Erik pointed out, this will break the CRAM-MD5 authentication method. Both client and server need to know the password for CRAM- MD5 to work properly. If you do this, it's likely that qmail will still claim it supports CRAM-MD5, but if a client tries to authenticate using this method it will fail. If none of your users authenticate this way it's probably not a big deal though.

Mike


---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to