Hello,

  Attached is a patch to handle md5 passwords in a nice fashion.  It
supports md5 hashes and digests for mysql and postgres, including
dbmail-adduser support for them, and even updates the man page.  :)
A couple other fixes are in there, but not the patch from yesterday
for big endian Linux systems.  It will apply clean to dbmail-1.1
source with or without that patch.  I've tested all the functionality
I can remember adding, but please hollar if anyone has any problems
with it.

  Basically, the following encryption_types have the following effect:

 crypt: uses the crypt(), which may or may not support md5 hashes,
        depending on what libraries you link into your binary
   md5: uses crypt() for md5 hashes, or makemd5() for md5 digests
        (distinguished by the "$1$" string)
md5sum: supports only md5 digests

  For the dbmail-adduser options, this is from the man page:

    [-5 password] The md5 hash of the new password for this user.
    [+5 password] The new (cleartext) password for this user which will be 
stored as an md5 hash.
    [d5 password] The md5 digest of the new password for this user.
    [D5 password] The new (cleartext) password for this user which will be 
stored as an md5 digest.


  Also there are some trivial convert scripts in sql/{mysql,postgres}/
to change your passwd field to varchar(34).  About the only thing
that'd still be nice is an easy way to fascilitate selecting -lcrypt
or -lcrypto with ./configure; Ryan, you want to add --with-libcrypt
and --with-libcrypto options?  Without that, you can manually specify
the libraries with build.sh, or simply run ./configure and manually
add -lcrypt to the "LIB = " line in Makefile afterwards.

Later,
Jesse


--
Jesse Norell
[EMAIL PROTECTED]

Attachment: dbmail-1.1-md5_passwd.patch
Description: Binary data

Reply via email to