Hello all,

i m new to web cyradm. Have done successful set up web-cyradm. How can
i config squirrelmail's change_sqlpass plugin to allow individual user
to change their password from squirrelmail. There is change_sqlpass
plugin config.php with a few variables which have to config according
to web-cyradm db table and encryption method. But i m not sure about
those value meaning. Please help.
From change_sqlpass config,

I change this to web-cyradm config.

$csp_dsn = 'mysql://user:[EMAIL PROTECTED]/email_users';

I m not sure how to edit this string to match with web-cyradm.

$lookup_password_query = 'SELECT count(*) FROM users WHERE username =
"%1" AND crypt_password = %4';

$password_update_queries = array(
           'UPDATE users SET crypt_password = %4 WHERE username = "%1"',

);

What type of encryption should be match with web-cyradm "crypt" option.

  // password_encryption
  //
  // What encryption method do you use to store passwords
  // in your database?  Please use one of the following,
  // exactly as you see it:
  //
  //   NONE          Passwords are stored as plain text only
  //   MYSQLPWD      Passwords are stored using the MySQL password() function
  //   MYSQLENCRYPT  Passwords are stored using the MySQL encrypt() function
  //   PHPCRYPT      Passwords are stored using the PHP crypt() function
  //   MD5CRYPT      Passwords are stored using encrypted MD5 algorithm
  //   MD5           Passwords are stored as MD5 hash
  //
  $password_encryption = 'MYSQLPWD';

And i m lack of knowledge on this part to integrate with web-cyradm....

// csp_salt_query
  // csp_salt_static
  //
  // Encryption types that need a salt need to know where to get
  // that salt.  If you have a constant, known salt value, you
  // should define it in $csp_salt_static.  Otherwise, leave that
  // value empty and define a value for the $csp_salt_query.
  //
  // Leave both values empty if you do not need (or use) salts
  // to encrypt your passwords.
  //
  // The query should return one value (one row, one column) which
  // is the salt value for the current user's password.  This
  // query is ignored if $csp_salt_static is anything but empty.
  //
  //   %1 in this query will be replaced with the full username
  //      (including domain), such as "[EMAIL PROTECTED]"
  //   %2 in this query will be replaced with the username (without
  //      any domain portion), such as "jose"
  //   %3 in this query will be replaced with the domain name,
  //      such as "example.com"
  //
  //$csp_salt_static = 'LEFT(crypt_password, 2)';
  //$csp_salt_static = '"a4"';  // use this format with MYSQLENCRYPT
  //$csp_salt_static = '$2$blowsomefish$';  // use this format with PHPCRYPT
  $csp_salt_static = '';

  //$csp_salt_query = 'SELECT SUBSTRING_INDEX(crypt_password, '$', 1)
FROM users WHERE username = "%1"';
  //$csp_salt_query = 'SELECT SUBSTRING(crypt_password,
(LENGTH(SUBSTRING_INDEX(crypt_password, '$', 2)) + 2)) FROM users
WHERE username = "%1"';
  $csp_salt_query = 'SELECT salt FROM users WHERE username = "%1"';
  //$csp_salt_query = '';


Thanks advance for help..
_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm

Reply via email to