[courier-users] authdb with sha broken?

2013-01-05 Thread Lorenzo Pistone
Hello,
I cannot login with imap. I have followed the guide about debugging 
login problems, and I get this weird log lines:

 authdaemond: authuserdb: clearpasswd=null, 
passwd=96bfdf86b8b8ea1a1d5e2087f12b35bee813e3c32518ea0c89b55e52436720bc125274058ac59cac
 authdaemond: supplied password 'xxx' does not match encrypted 
password 
'96bfdf86b8b8ea1a1d5e2087f12b35bee813e3c32518ea0c89b55e52436720bc125274058ac59cac'

which is kind of laughable, because you can see that the hashes match. 
Is it a bug or some other strange quirk? The hash has been created with 
'userdbpw -hmac-sha1'.

--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122912
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] authdb with sha broken?

2013-01-05 Thread Sam Varshavchik

Lorenzo Pistone writes:


Hello,
I cannot login with imap. I have followed the guide about debugging
login problems, and I get this weird log lines:

 authdaemond: authuserdb: clearpasswd=null,
passwd=96bfdf86b8b8ea1a1d5e2087f12b35bee813e3c32518ea0c89b55e52436720bc125274058ac59cac
 authdaemond: supplied password 'xxx' does not match encrypted
password
'96bfdf86b8b8ea1a1d5e2087f12b35bee813e3c32518ea0c89b55e52436720bc125274058ac59cac'

which is kind of laughable, because you can see that the hashes match.
Is it a bug or some other strange quirk? The hash has been created with
'userdbpw -hmac-sha1'.


Precomputed CRAM-SHA1 hashes should be stored in the hmac-sha1pw field, not  
the 'passwd' field.


Note, that they can be used with CRAM-SHA1 authentication method only.  
Clients that do not support CRAM-SHA1 will not be able to log in. This is  
typically used when, by policy, only CRAM-SHA1 authentication method can be  
used to log in, and the precomputed SHA1 hash avoids the need to retain  
cleartext passwords on the server.




pgpBxL8tIc7gG.pgp
Description: PGP signature
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122912___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users