Re: auxprop mysql w/crypt
On Wed, 22 Jun 2005, Jim Bartus wrote: Igor Brezac wrote: On Wed, 22 Jun 2005, Jim Bartus wrote: Has this patch: http://frost.ath.cx/software/cyrus-sasl-patches/ or something like it been merged into cyrus as of 2.1.19? I'm trying to store only password crypts/hashes in my database. No. Thanks Igor. Is there any particular reason why? It breaks secret based mechs, although cmu folks decide what gets included in the distro. It would seem to me that not storing plaintext passwords is a Good Thing. Is there some better way (saslauthd?) I should be going about it? Why don't you use the patch? I suppose you can use saslauthd with pam... -- Igor --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: auxprop mysql w/crypt
Igor Brezac wrote: On Wed, 22 Jun 2005, Jim Bartus wrote: Has this patch: http://frost.ath.cx/software/cyrus-sasl-patches/ or something like it been merged into cyrus as of 2.1.19? I'm trying to store only password crypts/hashes in my database. No. Thanks Igor. Is there any particular reason why? It would seem to me that not storing plaintext passwords is a Good Thing. Is there some better way (saslauthd?) I should be going about it? -jim --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: auxprop mysql w/crypt
Igor Brezac wrote: On Wed, 22 Jun 2005, Jim Bartus wrote: Has this patch: http://frost.ath.cx/software/cyrus-sasl-patches/ or something like it been merged into cyrus as of 2.1.19? I'm trying to store only password crypts/hashes in my database. No. Thanks Igor. Is there any particular reason why? It would seem to me that not storing plaintext passwords is a Good Thing. Is there some better way (saslauthd?) I should be going about it? -jim --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: auxprop mysql w/crypt
On Wed, 22 Jun 2005, Jim Bartus wrote: Has this patch: http://frost.ath.cx/software/cyrus-sasl-patches/ or something like it been merged into cyrus as of 2.1.19? I'm trying to store only password crypts/hashes in my database. No. -- Igor --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
auxprop mysql w/crypt
Has this patch: http://frost.ath.cx/software/cyrus-sasl-patches/ or something like it been merged into cyrus as of 2.1.19? I'm trying to store only password crypts/hashes in my database. -jim --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus Imap and crypt SQL Passwords?
@ Diego and all other
it workes now. I use ENCRYPT and all is running.
Thanks a lot!
> I use ENCRYPT, and it works.
> update usuarios set password=ENCRYPT("password","$1$encrypt$") ...
>
> $1$encrypt$ may be any string, AFAIR
>
> Good luck,
> -- Diego.
>
> On Wednesday 13 April 2005 08:05, Berger, Stefan (IT- Management) wrote:
>> Hi,
>>
>> thanks for the responses to all. But there is a problem still. I've
>> patched the cyrus-sasl-2.1.19 Version compiled and installed. So if I
>> set
>> the parameter sasl_password_format: plaintext all is running. Is the
>> sasl_password_format: crypt set, then i can't authenticate against my
>> MySQL Database. The Database is a mysql version 4.0.21. I use phpMyAdmin
>> too. If I create a user in the database which function i have to use for
>> the password encryption. Is it MD5 or PASSWORD? Both won't work.
>>
>> Thanks a lot
>>
>> >> i want use this crypt password to login in cyrus imap with mozilla
>> >> thunderbird or squirrelmail So in the mysql DB the password is
>> >> crypt.
>> >> So, what i have to do? Is this possible and where can i find the
>> patch?
>> >
>> > Do you mean something like this ?
>> > http://frost.ath.cx/software/cyrus-sasl-patches/
>> >
>> > Simon
>> >
>> >> Thanks a lot.
>> >>
>> >>> On Mon, 11 Apr 2005, Berger, Stefan (IT- Management) wrote:
>> >>>> Hi,
>> >>>>
>> >>>> is there a possibility for use crypt mysql passwords with cyrus
>> imap?
>> >>>> Is
>> >>>> there a patch available or any other solution? I've patched the
>> cyrus
>> >>>> sasl
>> >>>> 2.1.19 and this works fine.
>> >>>
>> >>> Not for any scheme which is hash based, only schemes which take a
>> >>> password
>> >>> (e.g. login). Otherwise the one-way crypt is not reversible and you
>> >>> have
>> >>> no way to transform the password.
>> >>>
>> >>> The archives have a pointer to a patch, if this is what you want to
>> do.
>> >>>
>> >>> ---
>> >>> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
>> >>> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
>> >>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>> >>
>> >> ---
>> >> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
>> >> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
>> >> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>>
>> ---
>> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
>> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>
> --
> -
> :( >> $$
> Hi! I'm a .signature virus! Copy me into your ~/.signature to help me
> spread!
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus Imap and crypt SQL Passwords?
I use ENCRYPT, and it works.
update usuarios set password=ENCRYPT("password","$1$encrypt$") ...
$1$encrypt$ may be any string, AFAIR
Good luck,
-- Diego.
On Wednesday 13 April 2005 08:05, Berger, Stefan (IT- Management) wrote:
> Hi,
>
> thanks for the responses to all. But there is a problem still. I've
> patched the cyrus-sasl-2.1.19 Version compiled and installed. So if I set
> the parameter sasl_password_format: plaintext all is running. Is the
> sasl_password_format: crypt set, then i can't authenticate against my
> MySQL Database. The Database is a mysql version 4.0.21. I use phpMyAdmin
> too. If I create a user in the database which function i have to use for
> the password encryption. Is it MD5 or PASSWORD? Both won't work.
>
> Thanks a lot
>
> >> i want use this crypt password to login in cyrus imap with mozilla
> >> thunderbird or squirrelmail So in the mysql DB the password is
> >> crypt.
> >> So, what i have to do? Is this possible and where can i find the patch?
> >
> > Do you mean something like this ?
> > http://frost.ath.cx/software/cyrus-sasl-patches/
> >
> > Simon
> >
> >> Thanks a lot.
> >>
> >>> On Mon, 11 Apr 2005, Berger, Stefan (IT- Management) wrote:
> >>>> Hi,
> >>>>
> >>>> is there a possibility for use crypt mysql passwords with cyrus imap?
> >>>> Is
> >>>> there a patch available or any other solution? I've patched the cyrus
> >>>> sasl
> >>>> 2.1.19 and this works fine.
> >>>
> >>> Not for any scheme which is hash based, only schemes which take a
> >>> password
> >>> (e.g. login). Otherwise the one-way crypt is not reversible and you
> >>> have
> >>> no way to transform the password.
> >>>
> >>> The archives have a pointer to a patch, if this is what you want to do.
> >>>
> >>> ---
> >>> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> >>> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> >>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> >>
> >> ---
> >> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> >> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> >> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
--
-
:( >> $$
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me
spread!
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus Imap and crypt SQL Passwords?
Hi, thanks for the responses to all. But there is a problem still. I've patched the cyrus-sasl-2.1.19 Version compiled and installed. So if I set the parameter sasl_password_format: plaintext all is running. Is the sasl_password_format: crypt set, then i can't authenticate against my MySQL Database. The Database is a mysql version 4.0.21. I use phpMyAdmin too. If I create a user in the database which function i have to use for the password encryption. Is it MD5 or PASSWORD? Both won't work. Thanks a lot >> i want use this crypt password to login in cyrus imap with mozilla >> thunderbird or squirrelmail So in the mysql DB the password is >> crypt. >> So, what i have to do? Is this possible and where can i find the patch? > > Do you mean something like this ? > http://frost.ath.cx/software/cyrus-sasl-patches/ > > Simon > >> Thanks a lot. >> >> >>> On Mon, 11 Apr 2005, Berger, Stefan (IT- Management) wrote: >>> >>>> Hi, >>>> >>>> is there a possibility for use crypt mysql passwords with cyrus imap? >>>> Is >>>> there a patch available or any other solution? I've patched the cyrus >>>> sasl >>>> 2.1.19 and this works fine. >>> >>> Not for any scheme which is hash based, only schemes which take a >>> password >>> (e.g. login). Otherwise the one-way crypt is not reversible and you >>> have >>> no way to transform the password. >>> >>> The archives have a pointer to a patch, if this is what you want to do. >>> >>> --- >>> Cyrus Home Page: http://asg.web.cmu.edu/cyrus >>> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu >>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html >>> >> >> --- >> Cyrus Home Page: http://asg.web.cmu.edu/cyrus >> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu >> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html >> >> > > --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus Imap and crypt SQL Passwords?
> i want use this crypt password to login in cyrus imap with mozilla > thunderbird or squirrelmail So in the mysql DB the password is crypt. > So, what i have to do? Is this possible and where can i find the patch? Do you mean something like this ? http://frost.ath.cx/software/cyrus-sasl-patches/ Simon > Thanks a lot. > > >> On Mon, 11 Apr 2005, Berger, Stefan (IT- Management) wrote: >> >>> Hi, >>> >>> is there a possibility for use crypt mysql passwords with cyrus imap? >>> Is >>> there a patch available or any other solution? I've patched the cyrus >>> sasl >>> 2.1.19 and this works fine. >> >> Not for any scheme which is hash based, only schemes which take a >> password >> (e.g. login). Otherwise the one-way crypt is not reversible and you have >> no way to transform the password. >> >> The archives have a pointer to a patch, if this is what you want to do. >> >> --- >> Cyrus Home Page: http://asg.web.cmu.edu/cyrus >> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu >> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html >> > > --- > Cyrus Home Page: http://asg.web.cmu.edu/cyrus > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html > > --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus Imap and crypt SQL Passwords?
Hi, I think the patch you are looking for is here: http://frost.ath.cx/software/cyrus-sasl-patches/ . Then, add some statements in imapd.conf : sasl_password_format: crypt It worked for me like that. -- Diego. On Monday 11 April 2005 13:07, Berger, Stefan (IT- Management) wrote: > i want use this crypt password to login in cyrus imap with mozilla > thunderbird or squirrelmail So in the mysql DB the password is crypt. > So, what i have to do? Is this possible and where can i find the patch? > > Thanks a lot. > > > On Mon, 11 Apr 2005, Berger, Stefan (IT- Management) wrote: > >> Hi, > >> > >> is there a possibility for use crypt mysql passwords with cyrus imap? Is > >> there a patch available or any other solution? I've patched the cyrus > >> sasl > >> 2.1.19 and this works fine. > > > > Not for any scheme which is hash based, only schemes which take a > > password (e.g. login). Otherwise the one-way crypt is not reversible and > > you have no way to transform the password. > > > > The archives have a pointer to a patch, if this is what you want to do. > > > > --- > > Cyrus Home Page: http://asg.web.cmu.edu/cyrus > > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu > > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html > > --- > Cyrus Home Page: http://asg.web.cmu.edu/cyrus > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html -- - :( >> $$ Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread! --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus Imap and crypt SQL Passwords?
i want use this crypt password to login in cyrus imap with mozilla thunderbird or squirrelmail So in the mysql DB the password is crypt. So, what i have to do? Is this possible and where can i find the patch? Thanks a lot. > On Mon, 11 Apr 2005, Berger, Stefan (IT- Management) wrote: > >> Hi, >> >> is there a possibility for use crypt mysql passwords with cyrus imap? Is >> there a patch available or any other solution? I've patched the cyrus >> sasl >> 2.1.19 and this works fine. > > Not for any scheme which is hash based, only schemes which take a password > (e.g. login). Otherwise the one-way crypt is not reversible and you have > no way to transform the password. > > The archives have a pointer to a patch, if this is what you want to do. > > --- > Cyrus Home Page: http://asg.web.cmu.edu/cyrus > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html > --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus Imap and crypt SQL Passwords?
On Mon, 11 Apr 2005, Berger, Stefan (IT- Management) wrote: Hi, is there a possibility for use crypt mysql passwords with cyrus imap? Is there a patch available or any other solution? I've patched the cyrus sasl 2.1.19 and this works fine. Not for any scheme which is hash based, only schemes which take a password (e.g. login). Otherwise the one-way crypt is not reversible and you have no way to transform the password. The archives have a pointer to a patch, if this is what you want to do. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Cyrus Imap and crypt SQL Passwords?
Hi, is there a possibility for use crypt mysql passwords with cyrus imap? Is there a patch available or any other solution? I've patched the cyrus sasl 2.1.19 and this works fine. Thanks in advance! --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
crypt
I've been brawling with this for a while now, maybe someone on here has an idea. In /etc/imapd.h sasl_password_format: crypt This does not work if the datastore actualy has a crypt()'d password. Note, above, that it's set to "crypt" but if I use plaintext in the datastore it -will- work. cyrus->datastoreresult - plain->plainworks crypt->plain works (shouldn't!) crypt->cryptfails (shouldn't!) Setting to plaintext works against this datastore. pureftpd with crypt works against this datastore. courier-imap with crypt works against this datastore. Hand tests with crypt work against this datastore. Cyrus for some reason is NOT decoding the crypt correctly (rather, it's not even TRYING. If it were incorrect then crypt->plain would not work, above.) Anyone have ideas? TIA. -Mike --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
sasl_password_format=crypt but no crypt?
I have set sasl_password_format=crypt and crypt=1 in /etc/pam.d/imap and /etc/pam.d/smtp but I can still login with plain text passwords in the database? Do I need http://frost.ath.cx/software/cyrus-sasl-patches/ for Cyrus-imapd 2.1.16-6 (Debian package)? Thanks, Jacob --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
1.5.27 crypt compilation error
Hello all Please, if someone knows , tell me why i can't compile sasl 1.5.27. I did compile 1.5.24 successfully ( with pwcheck ), but cannot 1.5.27 (with saslauthd). It says: auth_getpwent.o: In function `auth_getpwent': /usr/src/cyrus-sasl-1.5.27/saslauthd/auth_getpwent.c:72: undefined reference to `crypt' auth_shadow.o: In function `auth_shadow': /usr/src/cyrus-sasl-1.5.27/saslauthd/auth_shadow.c:149: undefined reference to `crypt' I found some answers in the list about it, but it doesnt help. I already have lines LIB_CRYPT = -lcrypt,and PLAIN_LIBS = -lcrypt in my Makefile. It goes by default after configure. Andrei V. Loukinykh , Evpatoria Ukrtelecom ISP, +380 6569 29376 ~~~ "UNIX is like a vigvam - no Windows, no Gates and an Apache inside"
