Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 4/28/2012 10:29 PM, Jeff Lacki wrote: Error: sql(jeff,127.0.0.1): Invalid password 'mypass' in passdb: Not a valid MD5-CRYPT or PLAIN-MD5 password Debug: sql(jeff,127.0.0.1): MD5(mypass) != 'mypass', try PLAIN scheme instead In dovecot-sql.conf.ext, set: default_pass_scheme = PLAIN Dovecot n

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
> salted hash format such as SSHA, and use plaintext auth (over SSL, of > course). Thank you so much for your in depth reponse Gedalya, I appreciate it! So now that I changed things up and my conf is: auth_mechanisms = plain login disable_plaintext_auth = no I get the following, which I dont ge

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 07:02 PM, Jeff Lacki wrote: Security is my #1 focus right now. Can someone explain the best solution? Or is the best solution to just get an SSL cert and use plaintext? (which is actually my future plan). You absolutely must use SSL if you want security. A non-plaintext authenti

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
Gedalya wrote: > On 04/28/2012 06:28 PM, Jeff Lacki wrote: > >>> 1. Is it even possible to do this via 'password_query'? > >> Please provide your dovecot version and output of the following command: > >> doveconf -n > >> and the complete external sql query files without passwords. > >> > >> You m

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 06:28 PM, Jeff Lacki wrote: 1. Is it even possible to do this via 'password_query'? Please provide your dovecot version and output of the following command: doveconf -n and the complete external sql query files without passwords. You might alsolet the SQL server compare the encryp

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
> > > > 1. Is it even possible to do this via 'password_query'? > > Please provide your dovecot version and output of the following command: > doveconf -n > and the complete external sql query files without passwords. > > You might alsolet the SQL server compare the encrypted > password in the dat

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 05:25 PM, Jeff Lacki wrote: /mf/home/jeep/shell/.signature The wiki says: "The password is in %w variable" Maybe you meant password_query = SELECT NULL AS password, \ 'Y' as nopassword, userid AS user \ FROM users WHERE userid='%u' AND AES_DECRYPT(password, 'mykey')='%

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Daniel Parthey
Hi Jeff, Jeff Lacki wrote: > Sorry if this is a noob question, but I cant seem to get my password_query to > work with dovecot + mysql. Im using 'Password verification by SQL server' at: > > http://wiki2.dovecot.org/AuthDatabase/SQL > > trying to modify it to work with my encrypted passwords in

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
> > > > /mf/home/jeep/shell/.signature > The wiki says: "The password is in %w variable" > Maybe you meant > > password_query = SELECT NULL AS password, \ > 'Y' as nopassword, userid AS user \ > FROM users WHERE userid='%u' AND AES_DECRYPT(password, 'mykey')='%w' > > Thanks, but when I

Re: [Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Gedalya
On 04/28/2012 04:54 PM, Jeff Lacki wrote: Hello- Sorry if this is a noob question, but I cant seem to get my password_query to work with dovecot + mysql. Im using 'Password verification by SQL server' at: http://wiki2.dovecot.org/AuthDatabase/SQL trying to modify it to work with my encrypted

[Dovecot] help with AES_DECRYPT and password lookup - mysql password_query

2012-04-28 Thread Jeff Lacki
Hello- Sorry if this is a noob question, but I cant seem to get my password_query to work with dovecot + mysql. Im using 'Password verification by SQL server' at: http://wiki2.dovecot.org/AuthDatabase/SQL trying to modify it to work with my encrypted passwords in the DB. Im using the followin