listy-dyskusyjne Krzysztof Dabrowski writes:
 > At 20:06 2000-05-03, Russell Nelson wrote:
 > >But it looks to me like he's reversed the password and the
 > >timestamp parameters to checkpassword.
 > 
 > so the order is : LOGIN, PASSWORD, TIMESTAMP
 > 
 > my cmd5checkpassword accepts:
 > 
 > login name terminated by \e0,
 > a cram-md5 challenge terminated by \e0,
 > and a cram-md5 response terminated by

qmail-pop3d's apop command sends first parameter, second parameter,
timestamp, where the "timestamp" parameter is actually
pid.timestamp@hostname.  That would correspond to login, response, and 
challenge for MD5.

Not that it *really* matters since CRAM-MD5 and APOP use algorithms
with different details.

-- 
-russ nelson <[EMAIL PROTECTED]>  http://russnelson.com
Crynwr sells support for free software  | PGPok | "Ask not what your country
521 Pleasant Valley Rd. | +1 315 268 1925 voice | can force other people to
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | do for you..."  -Perry M.

Reply via email to