Hello,
 
Like Marcel said you should use crypt = 3
for md5 encryption and use the latest 'pre' version of pam_mysql.
 
Regards,
Leon Kolchinsky

________________________________

From: [EMAIL PROTECTED] on behalf of Claus Grill
Sent: Thu 25.08.2005 17:09
To: [email protected]
Subject: Re: [Web-cyradm] Import users into mysql and md5sum



Hello Marcel,

>*
> But WAIT! You have written this before:
> > > > I am running web-cyradm on a Debian Sarge Server.
>
> Why yow write FreeBSD? I went to be confused :-)

Thats what John the Ripper says about the unshadowed password file. Never
mind, it's not really important.

>*
> > That is what I was trying to avoid. I have nearly no
> > knowledge of php or perl.
>
> Consulting? :-)

No thanks. I think I can handle that by myself without perl or php.

Thank you Leon for your information and links. It looks like they will for
sure help.

> > > If you wan't to convert the passwords to md5, you must have the
> > > passwords in plaintext so that you can use this in your sql query:
> > > "INSERT INTO tablename(username, password, ...) VALUES('marcel',
> > > '".md5($:POST["password"])."', '...');" Then he writes the
> >
> > passes in md5.
> >
> > That helped.
> > I tried something just right now
> >
> > echo bla | md5sum comes to something different then select md5('bla');
> >
> > But echo -n bla | md5sum matches with select md5('bla');
> >
> > So getting the useraccounts and passwords into the db now
> > shouldn't be much of a problem anymore for me.

Guess I was too fast with this one.

First I stumbled over the length of the password field in mysql. It is created
just with 30 characters by the script. And md5 is 32 characters.

Well I changed that to 40 now.

For testing I did then the following:

* set the password of a user to md5('test')
* changed /etc/pam.d/imap to md5=y and deleted the crypt=1
* and ran testsaslauthd -u test -p test -s imap

And of course: Error. Then I googled around to find the right parameters
for /etc/pam.d/imap to use md5, with no real helpful result.

I tried everything to /etc/pam.d/imap: All type of crypt and md5=y, md5=1 and
so on, in all combinations.

Still didn't get it to work.

Is there somebody who has web-cyradm with md5 passwords on a Debian Sarge
system (with just standard debian packages) running?

Of course any other hints are welcome too. ;)

Regards,

Claus Grill
_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm


<<winmail.dat>>

_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm

Reply via email to