Hi Dave,

I think the difference between lcrypt and lcrypto applies only to the
password field when you want to use md5 hashes. Not sure if it has
anything to do with md5 digests, which are used for the APOP.

Best regards,
Bobby
[EMAIL PROTECTED]

on Wednesday, February 26, 2003, 2:42:25 AM, Dave Logan wrote:

DL> Hi gang.
DL> A hundred years ago, quite possibly slightly more recently
DL> than that, I announced that the encryption stuff didn't seem
DL> to work on the sparc platform.

DL> Let me give a rundown of the problem again:

DL> Compiles fine, performs all functions (pop/smtp/adduser/maintenance)
DL> flawlessly.
DL> If I set a user to encryption_type of crypt and use a 13 char crypt,
DL> it works fine as plaintext (non-apop) login.
DL> When I apop, this is the result:

DL> generate the hash from the commandline:
DL> [EMAIL PROTECTED]:~$ echo -n '<[EMAIL PROTECTED]>test' | md5sum
DL> 8ad716d54250c4c1898559ac1025fed5

DL> the pertinent logs:
DL> Feb 25 17:22:33 frobnitz dbmail/pop3d[19403]: auth_md5_validate(): 
apop_stamp=[<[EMAIL PROTECTED]>], userpw=[test]
DL> Feb 25 17:22:33 frobnitz dbmail/pop3d[19403]: auth_md5_validate(): 
checkstring for md5 [<[EMAIL PROTECTED]>test] -> result 
[4c210655b71767eab24ff166a3ce3400]
DL> Feb 25 17:22:33 frobnitz dbmail/pop3d[19403]: auth_md5_validate(): 
validating md5_apop_we=[4c210655b71767eab24ff166a3ce3400] 
md5_apop_he=[8ad716d54250c4c1898559ac1025fed5]
DL> Feb 25 17:22:33 frobnitz dbmail/pop3d[19403]: auth_md5_validate(): user 
[tester] could not be validated

DL> So whatever crypt call that dbmail is using is generating bad
DL> digests.  I should point out here that other programming languanges
DL> (PHP, perl) all agree with the md5sum commandline as to the correct
DL> result.  Also, using the same codebase on X86 architecture works just
DL> fine.  On the sparc, I have linked against libcrypt, and libcrypto,
DL> both with the same result.
DL> Another note, while linked against libcrypto, I can put a salted
DL> md5 hash in, and it works fine from the X86, but still no avail from
DL> the sparc.  I can copy the value right from the shadow file on the
DL> sparc, put it in the database which is hosted on the sparc, and it
DL> works fine with an X86 client that uses the sparc database, so the
DL> shadow salt is crypted() "properly" it appears.

DL> Here's my sparc system info:

DL> dbmail 1.1 (-lmysqlclient -lcrypto)

DL> frobnitz:~# cat /etc/debian_version
DL> 3.0

DL> frobnitz:~# uname -a
DL> Linux frobnitz 2.4.18 #2 Thu Apr 11 14:37:17 EDT 2002 sparc64 unknown

DL> frobnitz:~# ldconfig -v | grep crypt
DL>         libcrypt.so.1 -> libcrypt-2.2.5.so
DL>         libcrypt.so.1 -> libcrypt-2.2.5.so
DL>         libcrypto.so.0.9.6 -> libcrypto.so.0.9.6

DL> frobnitz:~# dpkg --list | grep mysql
DL> ii  libdbd-mysql-p 1.2216-2       mySQL database interface for Perl
DL> ii  libmysqlclient 3.23.49-8.2    mysql database client library
DL> ii  libmysqlclient 3.23.49-8.2    mysql database development files
DL> ii  mysql-client   3.23.49-8.2    mysql database client binaries
DL> ii  mysql-common   3.23.49-8.2    mysql database common files (e.g. 
/etc/mysql
DL> ii  mysql-doc      3.23.49-8.2    mysql database documentation
DL> ii  mysql-navigato 1.2.4-1        GUI client program for MySQL database 
server
DL> ii  mysql-server   3.23.49-8.2    mysql database server binaries
DL> ii  php4-mysql     4.1.2-6        MySQL module for php4
DL> ii  postfix-mysql  1.1.11-0.woody MYSQL map support for Postfix




DL> Anybody want to take a stab at the problem and a solution?
DL> If you need more info, please don't hesitate to ask.

DL> thanks,
DL> dave



DL> --
DL> Dave Logan

DL> Entertainment and Education all in One Big Bowl:
DL> http://www.digitalcoven.com/


DL> _______________________________________________
DL> Dbmail mailing list
DL> Dbmail@dbmail.org
DL> https://mailman.fastxs.nl/mailman/listinfo/dbmail

Reply via email to