-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Sam,

> Courier does not support this particular password encryption function.
I'm  not sure're
> how you're even able to validate such a password. The only way  this
might work is
> if you're using PAM to authenticate, with your PAM  library
implementing support
> for this encryption method. However were this  to be the case, you
should also be
> using PAM to set the password, via a  scripted expect session:

I am not using pam for authentication in Courier. I'm using authmysql.
Probably the reason authentication works was pure luck, the way Courier
makes the crypt (3) call. The SHA512 based password hashing in my
implementation is compatible to an extent with the MD5 based algorithm
in wider circulation. Depending on exactly how Courier reads the        
password string and processes it through crypt (3) it could likely work
without you ever intending for it to have done. Having it carry over to
password changes, now, that requires some handling. I'd be willing to
make the modifications and submit a patch if you'd be willing to point
me to a starting point in the code. I could find it myself, but as the
author if you told me where to look you'd shave a lot of time off the
analysis and modification time. I'll probably go ahead and make the
modifications and at least make the capability available through a
private patch even if you aren't interested in having it in the mainline
Courier distribution because I and some people I work with have a use
for it. If you want to use it though, I'll do the work to add it and
give it to you in the form of a patch.
- --
Those of you who think they know everything are very annoying to those
of us who actually do.
Joseph C. Lininger, <[email protected]>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBCAAGBQJKz332AAoJEMh8jNraUiwqEVMH/3ksCWKRCMfwe21DhPHKxDr4
PfKK+9U7sEfP9XhxkWlEogc+iFQdkgWT6kgG6/9ja0TEpJBdBVs6PJCFqB1XV47e
75duohtboyfVNzpQtZFZrNo67DTT7A14kp/pIry8eiriKsVn54J06Y1YEQKvl4mp
scGGgCGkIUxQE5s2Zqg7eB9QBjz1VxI6KCaaUTtKVFy152HIo7VN82fUcB6ezmUe
K2Duqy5srT0n3cDl9kdhYJ5TlsQ9SlIZx5v4eWTJIKX+qRLvucqx1zDFxgKH6hPr
Qh4ekl4CdxoQI3/ogmZqbNq9CxWxIyIh8Uy2UyRFI6n1WAL7Sdlebhy20roB2QQ=
=NKMR
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to