Re: [SPAM] Re: [SOGo] buggy MD5 in SOGoSigh?

2011-04-20 Thread Jeroen Dekkers
At Wed, 20 Apr 2011 07:57:34 -0400, Ludovic Marcotte wrote: > > On 20/04/11 07:52, Martin Rabl wrote: > > Since when is md5 used for encrypting passwords in /etc/shadow?? > If the password string starts with $1$, it means it was MD5-encoded. > > My guess is that he strapped '$1$foobar' directly i

Re: [SPAM] Re: [SOGo] buggy MD5 in SOGoSigh?

2011-04-20 Thread Ludovic Marcotte
On 20/04/11 08:03, Comune di Cossato - Andrea Ferraris wrote: The second field of /etc/shadow that is something like '$1$nxf2V.NT$thmaXnvSJAUjltyslUWUG/' This password is salted ('nxf2V.NT' being the salt). SOGo's SQL-based authentication source doesn't yet support this. -- Ludovic Marcotte lm

Re: [SPAM] Re: [SPAM] Re: [SOGo] buggy MD5 in SOGoSigh?

2011-04-20 Thread Comune di Cossato - Andrea Ferraris
Il 20/04/2011 13.57, Ludovic Marcotte ha scritto: > On 20/04/11 07:52, Martin Rabl wrote: >> Since when is md5 used for encrypting passwords in /etc/shadow?? > If the password string starts with $1$, it means it was MD5-encoded. > > My guess is that he strapped '$1$foobar' directly in the database

Re: [SPAM] Re: [SOGo] buggy MD5 in SOGoSigh?

2011-04-20 Thread Comune di Cossato - Andrea Ferraris
Il 20/04/2011 13.34, Ludovic Marcotte ha scritto: > On 20/04/11 04:08, Comune di Cossato - Andrea Ferraris wrote: >>> INSERT INTO sogo_view VALUES ('alice', 'alice', 'linux-md5-password', >>> > 'Alice Thompson','alice-PV5Ro7/m...@public.gmane.org'); > Provide *exactly* what you're trying to do. We

Re: [SPAM] Re: [SOGo] buggy MD5 in SOGoSigh?

2011-04-20 Thread Ludovic Marcotte
On 20/04/11 07:52, Martin Rabl wrote: Since when is md5 used for encrypting passwords in /etc/shadow?? If the password string starts with $1$, it means it was MD5-encoded. My guess is that he strapped '$1$foobar' directly in the database without stripping the leading $1$. Regards, -- Ludovi

Re: [SPAM] Re: [SOGo] buggy MD5 in SOGoSigh?

2011-04-20 Thread Martin Rabl
Since when is md5 used for encrypting passwords in /etc/shadow?? And: what do you want with this passwords? Provide a single-login for your shell users at shell and SOGo? Thats not a quite good idea! If you want such a stuff, install a local ldap-server, configure linux PAM for using ldap and c

Re: [SPAM] Re: [SOGo] buggy MD5 in SOGoSigh?

2011-04-20 Thread Comune di Cossato - Andrea Ferraris
Il 20/04/2011 12.53, Martin Rabl wrote: > Hi, Hi and thx for your reply. > > Am 19.04.2011 um 12:29 schrieb Comune di Cossato - Andrea Ferraris: >> I toke the Linux ones and put them in SOgo with psql like that: >> >> INSERT INTO sogo_view VALUES ('alice', 'alice', 'linux-md5-password', >> 'Alice