>>> Thanks Tomas "allow bind_v2" solve my problem. Big
>>> thanks. One last question my all users's current
>> password are
>>> {SHA} encrypted. What will the change password
>>>
>> crypt.
>>> I checked it and it is not {SHA} encrypted.I want
>>> again {SHA}. Any way
>>
>> please be more specific. If it is not sha, then what is it? md5, ssha,
>> crypt, plaintext. You have disabled
>> $send_all_my_login_information_to_squirrelmail
>> option and I don't have access to your server.
>
> Well i dont know what is the new crypt. When I execute
> "ldapsearch -x -b "dc=webexs,dc=com"
> '(userpassword=*)'" it return the following result.
>
>
> userPassword::
> e1NIQX1BYk1IckxwUFZQVmFyOE03c0d1NzlzcUFQcG89

---- decode-base64.php ----
<?php
header('Content-Type: text/plain');
echo base64_decode('e1NIQX1BYk1IckxwUFZQVmFyOE03c0d1NzlzcUFQcG89');
?>
----

---- decode-base64.php output ----
{SHA}AbMHrLpPVPVar8M7sGu79sqAPpo=
----

It is sha. If you see field data with two colons (::), it is base64 encoded.

If you want stronger passwords, you need salted hashes. {md5} and {sha}
are vulnerable to hash list attack.

-- 
Tomas


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: [email protected]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to