O > Most of the mechanisms that can take plaintext passwords can also take the > hashes, the problem is that the type of hash they need varies based on > mechanism. > > This is, by the way, how the database conversion works. > > So, any auxprop plugin that can return either a hash of the correct format > for the mechanism via the "cmusaslsecret(MECHNAME)" properties, or a > plaintext password via the userPassword property should be doing "the > right thing"
Ah I see.. the auxprop plugins I have written often get 2 properties but I thought the second was CMU specific thing. userPassword and cmusaslsecret(what ever) . So for all those people who might want to use this they just need to set a property in ldap or mysql of cmusaslsecret(MECHNAME) (in case of mysql you %p the select statement to make sure it gets the correct thing). -- Simon turned down for another job doing well thinking of writing a book how not to get a job.