Re: [Dovecot] Password environment variable - logging the password

[Donovan Craig]

Timo Sirainen wrote:

> Hmm. I guess it's possible that the password is lost by then.. Then
> another possibility would be to use passdb sql + userdb prefetch and:
>
> password_query = SELECT .., '%w' as userdb_plain_pass, ..

That did the trick.

Thanks so much for your help.

Re: [Dovecot] Password environment variable - logging the password

[Donovan Craig]

>> On Jun 6, 2009, at 5:19 AM, Donovan Craig wrote:
>> Im using the mysql userdb, but the passwords are stored in MD5.
>> I want to be able to get the password within the post login script,
>> not from
>> the log file.
>>
>> Is there any way to do this?

> Timo Sirainen wrote:
> user_query = SELECT '%w' as plain_pass, ...
> then it should be in $PLAIN_PASS environment in post-login script.

This would be great if it worked, but unfortunately this %w is empty when I
try to use it.

>From the documentation, it seems that this variable is only available during
auth.

http://wiki.dovecot.org/Variables

Is there any other way I can get the plain password within the
postloginscripting?

Thanks again.

Donovan

Re: [Dovecot] Password environment variable - logging the password

[Donovan Craig]

> look at the setting:
>
> # In case of password mismatches, log the passwords and used scheme so the #
problem can be debugged. Requires auth_debug=yes to be set.
> #auth_debug_passwords = no

Thanks for your replies so far.

As mentioned, I¹d like to be able to log the username and password in plain
text after successful login.

I¹m using the mysql userdb, but the passwords are stored in MD5.

I want to be able to get the password within the post login script, not from
the log file.

Is there any way to do this?

Thanks.

Donovan

[Dovecot] Password environment variable - logging the password

[Donovan Craig]

Hi,

We¹re migrating to a Cpanel hosting system.

Our passwords are currently stored in MD5.

I looked at the post login scripting to be able to start storing the plain
text passwords as people login temporarily so we can automate our migration.

It seems that the password is not available in the post login environment
variables.

Is there any way we can get access to the plain text password upon login so
we can insert this into our user table?

Best regards,

Donovan