Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 4/28/2012 10:29 PM, Jeff Lacki wrote: Error: sql(jeff,127.0.0.1): Invalid password 'mypass' in passdb: Not a valid MD5-CRYPT or PLAIN-MD5 password Debug: sql(jeff,127.0.0.1): MD5(mypass) != 'mypass', try PLAIN scheme instead In dovecot-sql.conf.ext, set: default_pass_scheme = PLAIN Dovecot n

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
> salted hash format such as SSHA, and use plaintext auth (over SSL, of > course). Thank you so much for your in depth reponse Gedalya, I appreciate it! So now that I changed things up and my conf is: auth_mechanisms = plain login disable_plaintext_auth = no I get the following, which I dont ge

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 07:02 PM, Jeff Lacki wrote: Security is my #1 focus right now. Can someone explain the best solution? Or is the best solution to just get an SSL cert and use plaintext? (which is actually my future plan). You absolutely must use SSL if you want security. A non-plaintext authenti

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
Gedalya wrote: > On 04/28/2012 06:28 PM, Jeff Lacki wrote: > >>> 1. Is it even possible to do this via 'password_query'? > >> Please provide your dovecot version and output of the following command: > >> doveconf -n > >> and the complete external sql query files without passwords. > >> > >> You m

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 06:28 PM, Jeff Lacki wrote: 1. Is it even possible to do this via 'password_query'? Please provide your dovecot version and output of the following command: doveconf -n and the complete external sql query files without passwords. You might alsolet the SQL server compare the encryp

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
> > > > 1. Is it even possible to do this via 'password_query'? > > Please provide your dovecot version and output of the following command: > doveconf -n > and the complete external sql query files without passwords. > > You might alsolet the SQL server compare the encrypted > password in the dat

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 05:25 PM, Jeff Lacki wrote: /mf/home/jeep/shell/.signature The wiki says: "The password is in %w variable" Maybe you meant password_query = SELECT NULL AS password, \ 'Y' as nopassword, userid AS user \ FROM users WHERE userid='%u' AND AES_DECRYPT(password, 'mykey')='%

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Daniel Parthey
Hi Jeff, Jeff Lacki wrote: > Sorry if this is a noob question, but I cant seem to get my password_query to > work with dovecot + mysql. Im using 'Password verification by SQL server' at: > > http://wiki2.dovecot.org/AuthDatabase/SQL > > trying to modify it to work with my encrypted passwords in

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
> > > > /mf/home/jeep/shell/.signature > The wiki says: "The password is in %w variable" > Maybe you meant > > password_query = SELECT NULL AS password, \ > 'Y' as nopassword, userid AS user \ > FROM users WHERE userid='%u' AND AES_DECRYPT(password, 'mykey')='%w' > > Thanks, but when I

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 04:54 PM, Jeff Lacki wrote: Hello- Sorry if this is a noob question, but I cant seem to get my password_query to work with dovecot + mysql. Im using 'Password verification by SQL server' at: http://wiki2.dovecot.org/AuthDatabase/SQL trying to modify it to work with my encrypted

[Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
Hello- Sorry if this is a noob question, but I cant seem to get my password_query to work with dovecot + mysql. Im using 'Password verification by SQL server' at: http://wiki2.dovecot.org/AuthDatabase/SQL trying to modify it to work with my encrypted passwords in the DB. Im using the followin

Re: [Dovecot] Session IDs

2012-04-28 Thread Daniel Parthey
Timo Sirainen wrote: > v2.1.2 added support for "session IDs", which is a 9 year unique identifier > for that specific IMAP/POP3 connection. Initially I thought it would only be > useful for tracking connections going through Dovecot proxies to backends > (the session ID is forwarded) Sounds like

[Dovecot] SETANNOTATION for Dovecot

2012-04-28 Thread Dieter Knopf
Hello, i'm using kmail2 and for Folder Settings the SETANNOATION command is needed. Is there any way to add this command to Dovecot? I already found a dovecot-metadata-plugin but there is no Package available for Debian. Thanks Dieter

Re: [Dovecot] Refiltering mails without loosing flags

2012-04-28 Thread Dieter Knopf
2011/12/12 Stephan Bosch : > Since last week, the new sieve-filter command line tool, which is intended > for just such a task, is part of the normal compile output for Pigeonhole > 0.3.x for Dovecot v2.1. Unfortunately, it is not released yet, so I guess > you're stuck with your old getmail-based

[Dovecot] Session IDs

2012-04-28 Thread Timo Sirainen
v2.1.2 added support for "session IDs", which is a 9 year unique identifier for that specific IMAP/POP3 connection. Initially I thought it would only be useful for tracking connections going through Dovecot proxies to backends (the session ID is forwarded), but then I thought it could be useful

[Dovecot] ERR Attentication error dovecot

2012-04-28 Thread SARAVANAJ
-- View this message in context: http://old.nabble.com/ERR-Attentication-error-dovecot-tp33763251p33763251.html Sent from the Dovecot mailing list archive at Nabble.com.

[Dovecot] lmtp proxy timeout while waiting for reply to DATA reply

2012-04-28 Thread Daniel Parthey
Hi, we are experiencing similar sporadic data timeout issues with dovecot 2.0.20 as in http://dovecot.org/pipermail/dovecot/2011-June/059807.html at least once a week. Some mails get temporarily deferred in the postfix queue since dovecot director lmtp refuses them and the mails are delivered at a