Hello everyone,
I need some help from someone who is familiar with authentication using SQL -
"SOGoUserSources" configuration / password schemes.

My problem: I can't log in. (SOGo Version is 2.1.1a) Error in logfile:
Dec 06 02:39:49 sogod [7071]: SOGoRootPage Login from '192.168.192.2' for user
'[email protected]' might not have worked - password policy: 65535
grace: -1  expire: -1  bound: 0

Passwords are created by Postfixadmin for Dovecot.
Password scheme: ssha512 (salted SHA 512).
The MySQL database view for SOGo (sogo_auth) contains following for
c_password:
$6$uMCefpUPeiz7ZVqU
$wHIHPpqcsK0xOdihjXLnE8O7bgJa61Bpp9GVIEvULNPVJ7PABdjZAxY.7H0wgDF.jjDNqnN8qiPsO5qKUDdmm/

So, now i'm a bit confused by the SOGo documentation:
http://www.sogo.nu/files/docs/SOGo%20Installation%20Guide.pdf
Chapter 5 - Page 29, 30 - Authentication using SQL:

SOGoUserSources > viewURL > c_password
c_password -->: password of the user, plain text, crypt, md5 or sha encoded

>>>> Is it still true that just these 4 schemes work? <<<<

According to the "userPasswordAlgorithm" description plenty more seem possible
- or is this something else?
Possible values are: none, plain, crypt, md5, md5-crypt, smd5, cram-md5, ldap-
md5, and sha, sha256, sha512 and
its ssha (e.g. ssha or ssha256) variants. Passwords can have the scheme
prepended in the form {scheme}encryptedPass.

"userPasswordAlgorithm" is ssha512 in my configuration.


According to:
http://www.sogo.nu/bugs/bug_relationship_graph.php?bug_id=1608&graph=relation
SOGO supports the other ecryption formats since Version 1.3.16

If this is true, the description of "c_password -->: password of the user,
plain text, crypt, md5 or sha encoded"
should get adjusted.

Summarized, my questions are:
Is it still true that just 4 schemes work for c_password?
What could be the reason for the login error?
What is the best practice to debug the error?

Kind regards

T.B.
-- 
[email protected]
https://inverse.ca/sogo/lists

Reply via email to