Re: only cleartext in sasldb?

2006-09-29 Thread Marten Lehmann
Hello, it seems that sasldb stores all password in cleartext. Is it possible to use md5 or crypt as in /etc/passwd? Not without breaking non-plaintext mechanisms like CRAM-MD5 and DIGEST-MD5. that would be a problem, we currently support PLAIN only and don't intent to allow anything else

Re: only cleartext in sasldb?

2006-09-29 Thread Marten Lehmann
Hello, that would be a problem I ment: would _not_ be a problem Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Re: only cleartext in sasldb?

2006-09-29 Thread Wil Cooley
On Fri, 2006-09-29 at 16:24 +0200, Marten Lehmann wrote: Hello, that would be a problem I ment: would _not_ be a problem Then you shouldn't use sasldb. If you don't want regular system accounts, you can use saslauthd w/PAM, and with PAM use modules such as pam_userdb[1] or

Re: only cleartext in sasldb?

2006-09-28 Thread Ken Murchison
Marten Lehmann wrote: Hello, it seems that sasldb stores all password in cleartext. Is it possible to use md5 or crypt as in /etc/passwd? Not without breaking non-plaintext mechanisms like CRAM-MD5 and DIGEST-MD5. -- Kenneth Murchison Systems Programmer Project Cyrus Developer/Maintainer

only cleartext in sasldb?

2006-09-27 Thread Marten Lehmann
Hello, it seems that sasldb stores all password in cleartext. Is it possible to use md5 or crypt as in /etc/passwd? Regards Marten Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info:

RE: only cleartext in sasldb?

2006-09-27 Thread Sarah Walters
-Original Message- it seems that sasldb stores all password in cleartext. Is it possible to use md5 or crypt as in /etc/passwd? No, it's not. The entire point is to enable using CRAM-MD5 and other such mechanisms which require access to the plain-text password. The advantage of