Re: [vchkpw] Disable clear password
On 9/20/2007 2:28 AM, Kenny Lee wrote: What i have tried ... i go back to the installation folder, re-run again ./configure --disable-clear-passwd, then make and make install-strip ... but the result also same, when i used vuserinfo to view user's detail, the command still can show up the clear password of the user. You did the right thing recompiling. That should make new passwords not contain the clear text. But you've got to go through all the vpasswd files manually to remove the clear passwords from existing mailboxes. I actually did the same thing years ago and published the code: http://jeremy.kister.net/code/perl/vchkpw.remove_clearpw.pl -- Jeremy Kister http://jeremy.kister.net./
Re: [vchkpw] Disable clear password
Hi Jeremy, after the re-compiling, i tried to create a new domain, and found that the [EMAIL PROTECTED] also showed out the clear password while i used vuserinfo command. i unable to download the perl script you mentioned below .. http://jeremy.kister.net/code/perl/vchkpw.remove_clearpw.pl Regards, Kenny Lee From: Jeremy Kister [EMAIL PROTECTED] To: vchkpw@inter7.com Sent: 2007-09-20 02:44 PM Subject: Re: [vchkpw] Disable clear password On 9/20/2007 2:28 AM, Kenny Lee wrote: What i have tried ... i go back to the installation folder, re-run again ./configure --disable-clear-passwd, then make and make install-strip ... but the result also same, when i used vuserinfo to view user's detail, the command still can show up the clear password of the user. You did the right thing recompiling. That should make new passwords not contain the clear text. But you've got to go through all the vpasswd files manually to remove the clear passwords from existing mailboxes. I actually did the same thing years ago and published the code: http://jeremy.kister.net/code/perl/vchkpw.remove_clearpw.pl -- Jeremy Kister http://jeremy.kister.net./
Re: [vchkpw] Disable clear password
Hi Kenny, if you use mysql to store user data you should drop the clear password column too. It happend the same to me few months ago. I forgot to disable the clear password and after, when i recompiled and reinstalled, vpopmail was still putting the clear text password in the table till i didn't dropped the column in the DB. I hope it can help. Bye, Marcello Kenny Lee wrote: Hi Jeremy, after the re-compiling, i tried to create a new domain, and found that the [EMAIL PROTECTED] also showed out the clear password while i used vuserinfo command. i unable to download the perl script you mentioned below .. http://jeremy.kister.net/code/perl/vchkpw.remove_clearpw.pl Regards, Kenny Lee From: Jeremy Kister [EMAIL PROTECTED] To: vchkpw@inter7.com Sent: 2007-09-20 02:44 PM Subject: Re: [vchkpw] Disable clear password On 9/20/2007 2:28 AM, Kenny Lee wrote: What i have tried ... i go back to the installation folder, re-run again ./configure --disable-clear-passwd, then make and make install-strip ... but the result also same, when i used vuserinfo to view user's detail, the command still can show up the clear password of the user. You did the right thing recompiling. That should make new passwords not contain the clear text. But you've got to go through all the vpasswd files manually to remove the clear passwords from existing mailboxes. I actually did the same thing years ago and published the code: http://jeremy.kister.net/code/perl/vchkpw.remove_clearpw.pl -- Jeremy Kister http://jeremy.kister.net./
