Robin Bowes wrote:
 > Bob,

vpopmail uses a passwd-like flat file, hashed into a cdb for speed.

A sample line is as follows:

robin:"encrypted password":1:0:Robin Bowes:/home/vpopmail/domains/
robinbowes.com/robin:NOQUOTA:"plain text password"

This file is in /home/vpopmail/domains/robinbowes.com, i.e. a different file for each virtual domain.

They provide a utility for checking passwords (vchkpw); I'm not sure of the mechanism it uses but I believe it conforms to "standard" qmail conventions and is a drop-in replacement for the checkpasswd utility that qmail uses (e.g. qmail-pop3d)

Thinking a little further about this, how about a plugin that interfaces to various checkpassword implementations, i.e. runs an external program with a username/password pair and returns success or fail depending on the exit code of the program?


Details of the checkpassword interface here:

http://cr.yp.to/checkpwd.html

Other implementations detailed here:

http://www.qmail.org/top.html#checkpassword

Basically, the plugin would take a program name as a parameter and run it with username/password.

Does that sound feasible?

R.

Reply via email to