Re: digest-md5 password store

2007-12-08 Thread Carson Gaspar
Ken Murchison wrote: > The SASLv1 library used to store a non-plaintext secret for use with > DIGEST-MD5. In fact, it stored separate secrets for each mechanism. In > SASLv2, it was decided to use a single plaintext secret. Part of this > decision was based on the fact that the DIGEST-MD5 se

Re: digest-md5 password store

2007-12-07 Thread Janne Peltonen
On Wed, Dec 05, 2007 at 09:26:58AM -0600, Dan White wrote: > The auxprop plugin gives you the ability to authenticate using > the PLAIN, LOGIN, DIGEST-MD5, CRAM-MD5, NTLM and OTP mechs (and > probably more). > > saslauthd only gives you the ability to authenticate using PLAIN > and LOGIN (I bel

Re: digest-md5 password store

2007-12-06 Thread Ken Murchison
Guillermo Gómez wrote: >> pam_mysql would correlate to saslauthd, and the cyrus sasl plugin >> would correlate to auxprop. >> >> See documentation on the SASL pwcheck_method setting >> (sasl_pwcheck_method in /etc/imapd.conf). >> >> When set to saslauthd, the pwcheck_method will allow the use of >>

Re: digest-md5 password store

2007-12-06 Thread Alain Spineux
On Dec 5, 2007 9:42 PM, Guillermo Gómez <[EMAIL PROTECTED]> wrote: > > pam_mysql would correlate to saslauthd, and the cyrus sasl plugin > > would correlate to auxprop. > > > > See documentation on the SASL pwcheck_method setting > > (sasl_pwcheck_method in /etc/imapd.conf). > > > > When set to sas

Re: digest-md5 password store

2007-12-05 Thread Dan White
Guillermo Gómez wrote: > Thanks Dan, im reading and trying to digest all the material available. > > What the customer wants is: > > 1.- md5-digest between imap client/server (squirrelmail/cyrus-imapd) > 2.- md5 encrypted passwords stored in mysql db (cyrus-imap-??) > > Is this combination possi

Re: digest-md5 password store

2007-12-05 Thread Guillermo Gómez
> pam_mysql would correlate to saslauthd, and the cyrus sasl plugin > would correlate to auxprop. > > See documentation on the SASL pwcheck_method setting > (sasl_pwcheck_method in /etc/imapd.conf). > > When set to saslauthd, the pwcheck_method will allow the use of > the PLAIN and LOGIN mechanisms

Re: digest-md5 password store

2007-12-05 Thread Dan White
Guillermo Gómez wrote: > Ive been looking on how to work cyrus imap with mysql and found two options: > > cyrus pam with pam_mysql > cyrus sasl sql plugin > > In the first one it look like the store can have the password encrypted MD5 > The second one needs the passwords in the clear in the db >

Re: digest-md5 password store

2007-12-05 Thread Guillermo Gómez
> On Dec 5, 2007 9:52 AM, Guillermo Gómez <[EMAIL PROTECTED]> wrote: > > afaik the digest-md5 occurs between cyrus and the imap client > > (AUTHENTICATE command) so my doubt is about the user db and password > > store. Is the password stored in plain text? (mysql auth like > > http://www.delouw.ch/

Re: digest-md5 password store

2007-12-05 Thread Alain Spineux
On Dec 5, 2007 9:52 AM, Guillermo Gómez <[EMAIL PROTECTED]> wrote: > afaik the digest-md5 occurs between cyrus and the imap client > (AUTHENTICATE command) so my doubt is about the user db and password > store. Is the password stored in plain text? (mysql auth like > http://www.delouw.ch/linux/Post

digest-md5 password store

2007-12-05 Thread Guillermo Gómez
afaik the digest-md5 occurs between cyrus and the imap client (AUTHENTICATE command) so my doubt is about the user db and password store. Is the password stored in plain text? (mysql auth like http://www.delouw.ch/linux/Postfix-Cyrus-Web-cyradm-HOWTO/html/cyrus-config.html ) kind regards -- Ing.