Bugs item #1971591, was opened at 2008-05-25 02:34
Message generated for change (Settings changed) made by christian_boltz
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=937964&aid=1971591&group_id=191583
Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Allen Brooker (allen_jb)
Assigned to: Nobody/Anonymous (nobody)
Summary: Error in Dovecot SQL configuration (Password scheme)
Initial Comment:
DOCUMENTS/DOVECOT.txt (in PostfixAdmin 2.2.0) instructs the user to set default_pass_scheme to PLAIN-MD5 (MD5 sum stored in hex - http://wiki.dovecot.org/Authentication/PasswordSchemes ), when it should be MD5
----------------------------------------------------------------------
>Comment By: Christian Boltz (christian_boltz)
Date: 2008-05-25 22:52
Message:
Logged In: YES
user_id=593261
Originator: NO
Hmm, the dovecot wiki says:
- MD5-CRYPT: MD5 based salted password hash nowadays commonly used in
/etc/shadow. (e.g. "pass" = $1$ozdpg0V0$0fb643pVsPtHVPX8mCZYW/)
- MD5: Alias for MD5-CRYPT. Dovecot versions earlier than v1.0.rc16 need
to use this instead of MD5-CRYPT. This name is deprecated because MD5-CRYPT
isn't an actual MD5 hash.
- PLAIN-MD5: An actual MD5 hash of the password. (e.g. "pass" =
1a1dc91c907325c69271ddf0c944bc72)
-> the setting "MD5" is deprecated, it's called MD5-CRYPT nowadays
-> DOVECOT.txt is still wrong, because md5-crypt is the default setting in
config.inc.php
-> the documentation should contain a list of settings, depending on the
postfixadmin $CONF['encrypt'] setting
Fixed in SVN r372.
DOVECOT.txt now contains:
# Default password scheme.
# depends on your $CONF['encrypt'] setting:
# md5crypt -> MD5-CRYPT
# md5 -> PLAIN-MD5
# cleartext -> PLAIN
default_pass_scheme = MD5-CRYPT
I'm not a dovecot expert - please speak up if I got something wrong ;-)
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=937964&aid=1971591&group_id=191583
|