> > I did a little bit more looking today and I see that pam-mysql supports 
> > system 
> 
> > crypt WITH md5.  I think (but have not tested) that this means that it 
> > takes 
> an 
> > md5 of the password first and then crypts it.  (Note that I hate to think 
> > it 
> > does the opposite, because if you have the 8 character limit in crypt(), 
> > crypting it and THEN taking the md5 won't solve that problem!)  Does anyone 
> know 
> > for sure how it works?
> 
> Oops.  Be sure to disregard that last paragraph.  I was just guessing based 
> on 
> the name.  I think the algorithm is just different altogether.  It's not just 
> "md5-then-crypt".  But the good thing is that courier automagically 
> recognizes 
> this kind of password and knows what to do with it, and pam-mysql does the 
> right 
> thing if you make sure to turn password encryption to 3 and enable the md5 

Oops, the setting is actually crypt=1, not 3 as suggested above

> setting.  And most everyone else knows what to do, too, like the MySQL 
> encrypt() 
> command, just make sure you have an 8-character salt preceeded by $1$ and 
> followed by (apparently optional) $
> 
> > Since feedback seems in short supply, I think I will try this some time 
> > soon, 
> > but the outstanding question is if Courier can be taught how to deal with 
> > this 
> 
> > kind of "MD5CRYPT" password format???
> 


      

------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to