Re: [Dovecot] Bug in Dovecot 1.0.5 - CRYPT-MD5 not working

2008-12-30 Thread Jim Salter
Timo, you were correct. Apache's htpasswd version of MD5 does not interoperate with either CRYPT or MD5-CRYPT. Vpopmail's vpasswd files *do* interoperate properly with either CRYPT or with MD5-CRYPT. Apparently I fat-fingered a copy and paste earlier when testing, hence my mistaken impressio

Re: [Dovecot] Bug in Dovecot 1.0.5 - CRYPT-MD5 not working

2008-12-30 Thread Timo Sirainen
On Dec 31, 2008, at 1:50 AM, Jim Salter wrote: Hrm. OK, not arguing, just curious: where is the MD5-CRYPT standard defined? I don't think it's a real standard. It's just something that libcs started implementing. I think OpenBSD did it first and then others started copying. Worth notin

Re: [Dovecot] Bug in Dovecot 1.0.5 - CRYPT-MD5 not working

2008-12-30 Thread Timo Sirainen
On Dec 28, 2008, at 4:48 AM, Jim Salter wrote: I am positive that I am using MD5-CRYPT hashes, .. # htpasswd -nmb user password user:$apr1$bZQl//..$2IPoOibTBaqpG7pPFigOy/ This isn't MD5-CRYPT, it's some Apache-specific MD5 thing. I'm surprised it works with crypt. MD5-CRYPT passwords begin

[Dovecot] Bug in Dovecot 1.0.5 - CRYPT-MD5 not working

2008-12-30 Thread Jim Salter
Problem: Using MySQL storage for the user and password db with MD5-CRYPT hashes, Dovecot fails to successfully authenticate when the MD5-CRYPT or MD5 settings are specified as default_pass_scheme in dovecot-mysql.conf. Dovecot /does/ successfully authenticate against MD5-CRYPT hashes when de