Re: digest-md5 password store

2007-12-08 Thread Carson Gaspar
Ken Murchison wrote: The SASLv1 library used to store a non-plaintext secret for use with DIGEST-MD5. In fact, it stored separate secrets for each mechanism. In SASLv2, it was decided to use a single plaintext secret. Part of this decision was based on the fact that the DIGEST-MD5

Re: digest-md5 password store

2007-12-06 Thread Alain Spineux
On Dec 5, 2007 9:42 PM, Guillermo Gómez [EMAIL PROTECTED] wrote: pam_mysql would correlate to saslauthd, and the cyrus sasl plugin would correlate to auxprop. See documentation on the SASL pwcheck_method setting (sasl_pwcheck_method in /etc/imapd.conf). When set to saslauthd, the

Re: digest-md5 password store

2007-12-06 Thread Ken Murchison
Guillermo Gómez wrote: pam_mysql would correlate to saslauthd, and the cyrus sasl plugin would correlate to auxprop. See documentation on the SASL pwcheck_method setting (sasl_pwcheck_method in /etc/imapd.conf). When set to saslauthd, the pwcheck_method will allow the use of the PLAIN and

digest-md5 password store

2007-12-05 Thread Guillermo Gómez
afaik the digest-md5 occurs between cyrus and the imap client (AUTHENTICATE command) so my doubt is about the user db and password store. Is the password stored in plain text? (mysql auth like http://www.delouw.ch/linux/Postfix-Cyrus-Web-cyradm-HOWTO/html/cyrus-config.html ) kind regards --

Re: digest-md5 password store

2007-12-05 Thread Alain Spineux
On Dec 5, 2007 9:52 AM, Guillermo Gómez [EMAIL PROTECTED] wrote: afaik the digest-md5 occurs between cyrus and the imap client (AUTHENTICATE command) so my doubt is about the user db and password store. Is the password stored in plain text? (mysql auth like

Re: digest-md5 password store

2007-12-05 Thread Guillermo Gómez
On Dec 5, 2007 9:52 AM, Guillermo Gómez [EMAIL PROTECTED] wrote: afaik the digest-md5 occurs between cyrus and the imap client (AUTHENTICATE command) so my doubt is about the user db and password store. Is the password stored in plain text? (mysql auth like

Re: digest-md5 password store

2007-12-05 Thread Dan White
Guillermo Gómez wrote: Ive been looking on how to work cyrus imap with mysql and found two options: cyrus pam with pam_mysql cyrus sasl sql plugin In the first one it look like the store can have the password encrypted MD5 The second one needs the passwords in the clear in the db

Re: digest-md5 password store

2007-12-05 Thread Guillermo Gómez
pam_mysql would correlate to saslauthd, and the cyrus sasl plugin would correlate to auxprop. See documentation on the SASL pwcheck_method setting (sasl_pwcheck_method in /etc/imapd.conf). When set to saslauthd, the pwcheck_method will allow the use of the PLAIN and LOGIN mechanisms, and

Re: digest-md5 password store

2007-12-05 Thread Dan White
Guillermo Gómez wrote: Thanks Dan, im reading and trying to digest all the material available. What the customer wants is: 1.- md5-digest between imap client/server (squirrelmail/cyrus-imapd) 2.- md5 encrypted passwords stored in mysql db (cyrus-imap-??) Is this combination possible?