Auditing passwds

[Franco Galian]

Hi, I've noticed that when I create an account, first the system updates
vpasswd and then it updates vpasswd.cdb. It's that right? because I am
willing to do an audit to user passwds, so I just could use vpasswd file for
example with john the ripper, anybody has tryed this?

Thanks in advance

Franco Galian
PS: I have qmail 1.0.3 + vpopmail 4.9.8.+ ezmlm(0.53)-idz(0.40) + qmailadmin
0.42 + sqwebmail 1.23 running at an OpenBSD 2.8 box