[Dovecot] Password authentication and character set

2008-11-18 Thread Fredrik Grönqvist
Hi, I've searched in the wiki and in the mailinglist archives but haven't found anything about password character sets within the dovecot authentication deamon. My problem is that we have users with passwords containing scandinavian characters (äöå, umlauts) and the debug log shows that diff

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Timo Sirainen
On Nov 18, 2008, at 5:32 PM, Fredrik Grönqvist wrote: Is there a setting that "forces" the authentication daemon to convert the provided password to a specific charset before the comparison takes place, or how should one handle this? Dovecot doesn't know the character set that the client is

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Geert Hendrickx
On Tue, Nov 18, 2008 at 05:51:05PM +0200, Timo Sirainen wrote: > On Nov 18, 2008, at 5:32 PM, Fredrik Grönqvist wrote: > > >Is there a setting that "forces" the authentication daemon to > >convert the provided password to a specific charset before the > >comparison takes place, or how should o

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Timo Sirainen
On Tue, 2008-11-18 at 17:26 +0100, Geert Hendrickx wrote: > On Tue, Nov 18, 2008 at 05:51:05PM +0200, Timo Sirainen wrote: > > On Nov 18, 2008, at 5:32 PM, Fredrik Grönqvist wrote: > > > > >Is there a setting that "forces" the authentication daemon to > > >convert the provided password to a spec

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Fredrik Grönqvist
18.11.2008 19:03, Timo Sirainen wrote: On Tue, 2008-11-18 at 17:26 +0100, Geert Hendrickx wrote: On Tue, Nov 18, 2008 at 05:51:05PM +0200, Timo Sirainen wrote: On Nov 18, 2008, at 5:32 PM, Fredrik Grönqvist wrote: Is there a setting that "forces" the authentication daemon to c

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Geert Hendrickx
On Tue, Nov 18, 2008 at 07:03:04PM +0200, Timo Sirainen wrote: > On Tue, 2008-11-18 at 17:26 +0100, Geert Hendrickx wrote: > > It seems like this is a limitation in the IMAP protocol. From RFC 3501: > > I remember reading something about using UTF-8 and stringprep in > authentication strings, pro

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Timo Sirainen
On Tue, 2008-11-18 at 19:27 +0200, Fredrik Grönqvist wrote: > 18.11.2008 19:03, Timo Sirainen wrote: > > On Tue, 2008-11-18 at 17:26 +0100, Geert Hendrickx wrote: > > > >> On Tue, Nov 18, 2008 at 05:51:05PM +0200, Timo Sirainen wrote: > >> > >>> On Nov 18, 2008, at 5:32 PM, Fredrik Grönqvis

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Fredrik Grönqvist
18.11.2008 19:57, Timo Sirainen wrote: Ok, I see how this makes things problematic. One couldn't just encode it to UTF-8 anyway and do the comparison after that (provided there would be an option enabled)? You can encode everything to UTF-8, but the result will be different depending on w

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Geert Hendrickx
On Tue, Nov 18, 2008 at 10:00:00PM +0200, Fredrik Grönqvist wrote: > Yes, I see. So in light of this and the conversation on the imap-protocol > -list > > http://mailman2.u.washington.edu/pipermail/imap-protocol/2008-February/000822.html > > > > our current options seem to boil down to having

Re: [Dovecot] Password authentication and character set

2008-11-18 Thread Fredrik Grönqvist
19.11.2008 01:34, Geert Hendrickx wrote: On Tue, Nov 18, 2008 at 10:00:00PM +0200, Fredrik Grönqvist wrote: Yes, I see. So in light of this and the conversation on the imap-protocol -list http://mailman2.u.washington.edu/pipermail/imap-protocol/2008-February/000822.html our current optio

Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Geert Hendrickx
On Wed, Nov 19, 2008 at 08:44:21AM +0200, Fredrik Grönqvist wrote: > Yes, I agree that it should be in UTF-8. My specific problem is that about > 80% (a rough estimate) of our users are on either Windows or webmail. Those > having passwords containing umlauts etc can log on, using their current > c

Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Geert Hendrickx
On Wed, Nov 19, 2008 at 01:54:48PM +0200, Fredrik Grönqvist wrote: > Thanks for the info, a setup like this is what I opted for eventually. I > added a note to that wiki page that the query also needs to return the > "nopassword" -field for Dovecot 1.1+ to accept the NULL password: Ok, good catch

Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Fredrik Grönqvist
19.11.2008 14:33, Geert Hendrickx wrote: In case someone else is looking for info about this, this workaround works for DB backed accounts, as you mention, but will probably not work with an LDAP (or other) backend. Right, it's just a hack that fits your particular setup. :-) For a prope

Re: [Dovecot] Password authentication and character set

2008-11-19 Thread Fredrik Grönqvist
19.11.2008 10:27, Geert Hendrickx wrote: On Wed, Nov 19, 2008 at 08:44:21AM +0200, Fredrik Grönqvist wrote: Yes, I agree that it should be in UTF-8. My specific problem is that about 80% (a rough estimate) of our users are on either Windows or webmail. Those having passwords containing umlaut