For MD5, hex encoding is the default. You can change that by modifying the scheme from {MD5} to {MD5.b64}

See also the documentation of userPasswordAlgorithm in the installation guide. [1]

Nicolas


[1] https://github.com/Alinto/sogo/blob/master/Documentation/SOGoInstallationGuide.asciidoc

Am 12.12.23 um 10:25 schrieb Владимир Вишняков (vishnyakov....@gmail.com):
Sorry, but rollback is not possible.

I needed to move the mailer to another server. A backup was made on the old server, on the new server I launched mailcow, then deployed the backup using the backup_and_restore.sh script( (supplied with mailcow). All containers started successfully, imap / smtp are working for all users.
Sogo also worked, but I tested it on a user with {BLF-CRYPT} password.
A couple of days later, a person contacted me who could not enter sogo. I started looking into it and realized that only users with an md5 hash cannot log in.

SOGO current version: 5.9.0
Old ver - i think Sogo 5.8.0, I can't look anymorе, old server is down.

вт, 12 дек. 2023 г. в 13:30, qhivert <users@sogo.nu>:

    Hello, you’ve updated from what sogo version to what? If you
    rollback your mailcow does it work again?

    Quentin

    *From:*users-requ...@sogo.nu <users-requ...@sogo.nu> *On Behalf Of
    *???????? ????????
    *Sent:* mardi 12 décembre 2023 07:22
    *To:* users@sogo.nu
    *Subject:* [SOGo] Authentication using ldap-md5 password fails

    Good afternoon

      I use a  mailcow: dockerized mail server with an integrated
    container SOGO. After the update, sogo stopped allowing users
    whose password hash was generated using the {MD5} algorithm. Users
    whose password is generated by {BLF-CRYPT} are authenticated
    normally. I turned on the logs, in the logs I can see access to
    the database and retrieval of the password hash, but the password
    is not accepted.

    Dec 12 10:26:01 260deb884b40 2023-12-12 10:26:01.627 sogod[69:69]
    <MySQL4Channel[0x0x5562e2feb2e0] connection=0x0x5562e2b3b230> SQL:
    SELECT c_password FROM _sogo_static_view WHERE c_uid =
    'pp_pet...@xx.xx';
    Dec 12 10:26:01 260deb884b40 2023-12-12 10:26:01.627 sogod[69:69]
    <MySQL4Channel[0x0x5562e2feb2e0] connection=0x0x5562e2b3b230>  
    query has results, entering fetch-mode.

    ...

     SOGoRootPage Login from 'MY.IP.AD.DR' for user 'pp_pet...@xx.xx'
    might not have worked - password policy: 65535  grace: -1  expire:
    -1  bound: 0

    "c_password" field on _sogo_static_view contains hash like:

     {MD5}ZVN1hovmmV34NCxjRKIDVw==

    Base64 encoded MD5 hash

    userPasswordAlg setting:

    <key>userPasswordAlgoritm</key>

    <string>ldap-md5</string>

    i also try md5

    What could be the problem?Plz  help me fix it

Reply via email to