Hi Jesse, I see. But this is not a md5 hash, it is a md5 checksum (digest). This is not supposed to be used for passwords at all, but for file checksums and so on. So i think the best solution (if we want to achieve compatibility and some kind of standard) would be to set 'md5' for md5 hashes and 'md5sum' for md5 digests. I hope you agree with that. Anyway this is something that IC&S will decide as dbmail is their software and what we suggest here is they implement support for both md5 types in the distribution.
Best regards, Bobby [EMAIL PROTECTED] on Saturday, February 22, 2003, 2:08:47 AM, Jesse Norell wrote: JN> Hello, JN> A non-salted md5 hash is: JN> # echo 'something like this' | md5sum JN> e374ab9257baad9f666f993dd84fae20 JN> I'll attach a copy of the previous md5 password patch - I've not JN> tried it with recent cvs, so it may need a bit of tweaking, but JN> worked last I'd tried it. There are some applications that rely JN> on it (namely, weDBmail and our internal administrative stuff), so JN> if there's a new value for encryption_type (eg. 'md5+') it won't JN> require rewriting existing things to work again. JN> Thanks, JN> Jesse JN> ---- Original Message ---- JN> From: Boyan Alexiev <dbmail@dbmail.org> JN> To: Jesse Norell <dbmail@dbmail.org> JN> Subject: Re[2]: [Dbmail] MD5 salted hashes in Dbmail (System passwords can be used) JN> Sent: Sat, 22 Feb 2003 01:09:15 +0200 >> Hi Jesse, >> >> In fact I wrote this message after I read one of your questions. I >> have made this patch to enable my dbmail to work with the passwords I >> already had. I am not aware of the details of the other patch so if >> you let me know where to find more info it will be of help. But anyway >> there is no reason that the 'md5' can not be changed. This is source, >> so anyone can change it, including me. Please let me know why you >> would prefer to use non-salted md5 and what exactly does it look >> like... :) >> >> >> Regards, >> Bobby >> [EMAIL PROTECTED] >> >> >> JN> Hello, >> >> JN> Any chance you'd change the encryption_type from 'md5' to some >> JN> other value, to be compatible with the other (non-salted) md5 >> JN> password patch (which uses 'md5' too)? >> >> >> JN> ---- Original Message ---- >> JN> From: Boyan Alexiev <dbmail@dbmail.org> >> JN> To: dbmail@dbmail.org >> JN> Subject: [Dbmail] MD5 salted hashes in Dbmail (System passwords can be >> used) >> JN> Sent: Fri, 21 Feb 2003 22:39:37 +0200 >> >> >> Hello! >> >> >> >> I have made an addition to my mysql/dbauthmysql.c file to make DBmail >> >> 1.0 support MD5 hashed passwords like the ones created with the >> >> command >> >> >> >> mkpasswd --hash=md5 >> >> >> >> These hashes look like this: >> >> $1$TG2pWF9A$7ri7CJg/gi3KRqTbmj8VN1 where $1$TG2pWF9A$ is the salt >> >> >> >> Such passwords are used in a shadow file if you enable MD5 support. >> >> >> >> As this is an add-on you can specify 'md5' as encryption_type and >> >> still use all built-in options if you want. This way you should not >> >> have a problem to mix crypt and md5 passwords for different users if >> >> you want to (although I do not recommend it at all :) >> >> The only change you should make to compile this is to use -lcrypt >> >> instead of -lcrypto (refer to GNU EXTENSIONS in the crypt manual). >> >> I will be very glad if anyone finds this useful (I can not run my >> >> system without it) and if it finds its way into the official Dbmail >> >> release. >> >> Just let me know and I will post the code right away. >> >> >> >> Best regards, >> >> Bobby >> >> [EMAIL PROTECTED] >> >> >> >> _______________________________________________ >> >> Dbmail mailing list >> >> Dbmail@dbmail.org >> >> https://mailman.fastxs.nl/mailman/listinfo/dbmail >> >> >> JN> -- End Original Message -- >> >> >> JN> -- >> JN> Jesse Norell >> JN> [EMAIL PROTECTED] >> JN> _______________________________________________ >> JN> Dbmail mailing list >> JN> Dbmail@dbmail.org >> JN> https://mailman.fastxs.nl/mailman/listinfo/dbmail >> >> _______________________________________________ >> Dbmail mailing list >> Dbmail@dbmail.org >> https://mailman.fastxs.nl/mailman/listinfo/dbmail >> JN> -- End Original Message -- JN> -- JN> Jesse Norell JN> [EMAIL PROTECTED]
