** -----Original Message-----
** From: Gabriel Ambuehl [mailto:[EMAIL PROTECTED]]
**
** Hello Troy,
**
** Sunday, October 07, 2001, 7:39:00 AM, you wrote:
** > I was going to use vsybase, but it's not up to date.  That's ok,
** > because it's not exactly what I need anyways.  I'm looking to
** > create a read-only interface to MSSQL (running against the Platypus
** > database).  The new module will be vplatypus.c
**
** I mean I won't stop you from doing it but do you really think it's
** such a good idea to have vpopmail authenticate against NT based SQL
** servers? That's kinda like running OpenBSD and using Telnet to
** administrate the box over the net. Why don't you use MySQL in first
** place?

Heh, 2 years ago, I would have agreed with you 100%, and since that time,
I've seen my share of horrors (such as 30k users on Imail breaking NT).  But
I've been using MSSQL on Win2k for nearly 3 years now, and I've not had one
problem with it.  Even running upwards of 1000 queries per minute and
running large queries crunching millions of records at a time.

**
** > Last, because of the database schema, there is no crypted password.
** >  Is this ok, or do I need to go ahead and create one from the clear
** > text password? If so, will this work?
**
** >   pwent.pw_passwd = crypt(pwent.pw_clear_passwd,'xx');
**
** Yes but you should look into using a random salt...

I thought about this too, but the reason for a random salt is to make it
more difficult to run a dictionary attack.  It's not much of a risk
though... the crypted passwd will only exist in memory and only for a split
second.

Thanks,

--
  Troy Settle
  Pulaski Networks
  540.994.4254 - 866.477.5638
  http://www.psknet.com


Reply via email to