Joseph C. Lininger writes:
I got it to work with the MD5 hashing method by manually setting a password. However, if I try using the SHA512 hash, the one I'd really prefer to use, it will authenticate fine with the password. However, if I change it in sqwebmail, then it reverts to the DES based algorithm. I get a hash string in the form {CRYPT}<DES hash>. Is this a Courier thing, something with my setup, or a me thing?To let you know what I did, I first used the encrypt function in mysql to set the password on an account. I passed $6$ followed by 8 random characters and the $ character as the salt argument to that function. Then I checked the string in the table. Fine so far.
Courier does not support this particular password encryption function. I'm not sure're how you're even able to validate such a password. The only way this might work is if you're using PAM to authenticate, with your PAM library implementing support for this encryption method. However were this to be the case, you should also be using PAM to set the password, via a scripted expect session: http://www.courier-mta.org/authlib/README_authlib.html#pwchange
This would also use your system PAM library to actually update your password, which presumably would implement your encryption function.
So, I can't give you any more pointers since you did not adequately described your configuration. All I can tell you is that Courier recognizes $1${salt}$password, an MD5-based salted hashing (not a straight MD5 hash, btw); {MD5}password, a base64-encoded straight MD5 hash; {MD5RAW}password, a hexadecimal-encoded straight MD5 hash, {SHA}password, {SHA256}password and {SHA512}password, a base64-encoded straight SHAx hash, {SSHA}password, a base64-encoded salted SSHA1 hash method, and the legacy DES-based passwords.
pgpWuhQIttkv6.pgp
Description: PGP signature
------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference
_______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
