[exim] Re: Blowfish auth

2024-05-22 Thread Gandalf Corvotempesta via Exim-users
So, a little example to use that in a login authenticator with hash coming from DB ? Il giorno ven 17 mag 2024 alle ore 22:42 Slavko via Exim-users ha scritto: > > Dňa 17. mája 2024 16:31:08 UTC používateľ Andreas Metzler via Exim-users > napísal: > > >ametzler@argenau:~$ /usr/sbin/exim -be "\$

[exim] Re: Blowfish auth

2024-05-17 Thread Ian Z via Exim-users
On Fri, May 17, 2024 at 08:40:49PM GMT, Slavko via Exim-users wrote: > IMO would be great to mention it directly in {crypt} description, > that it will use any hash format supported by system... I find that part of the documentation already confusing enough :-( I'd be perfectly happy if exim *on

[exim] Re: Blowfish auth

2024-05-17 Thread Slavko via Exim-users
Dňa 17. mája 2024 16:31:08 UTC používateľ Andreas Metzler via Exim-users napísal: >ametzler@argenau:~$ /usr/sbin/exim -be "\${if crypteq {blah}{\N$(mkpasswd >--method=bcrypt blah)\N}{yes}{no}}" >yes Eh, yes, that works. When i test that with -be i did mistake with escaping of $ in hash... IM

[exim] Re: Blowfish auth

2024-05-17 Thread Jeremy Harris via Exim-users
On 17/05/2024 17:31, Andreas Metzler via Exim-users wrote: I think you are mistaken or misunderstood me Yup - I didn't read the code hard enough. Thanks for the correction! So (for the OP) - if the libc crypt() support blowfish, then a "crypteq" comparison provides access from Exim. -- Cheers,

[exim] Re: Blowfish auth

2024-05-17 Thread Andreas Metzler via Exim-users
On 2024-05-16 Jeremy Harris via Exim-users wrote: > On 16/05/2024 18:03, Andreas Metzler via Exim-users wrote: >> On 2024-05-16 Slavko via Exim-users wrote: >> [...] >>> Anyway, would be great, if exim can use system's crypto library, >>> to support all system's password hash formats. >> crypte

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 19:32 Jeremy Harris via Exim-users ha scritto: > Calling a ${perl } expansion in an authenticator's server_condition option > (thanks, Kai!) sounds like the best bet. Looks like you need > both Crypt::Blocwfish and Crypt::CBC though. Is what' i'm trying but see

[exim] Re: Blowfish auth

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 18:03, Andreas Metzler via Exim-users wrote: On 2024-05-16 Slavko via Exim-users wrote: [...] Anyway, would be great, if exim can use system's crypto library, to support all system's password hash formats. crypteq should already do that. Unfortunately it does not. There is sp

[exim] Re: Blowfish auth

2024-05-16 Thread Andreas Metzler via Exim-users
On 2024-05-16 Slavko via Exim-users wrote: [...] > Anyway, would be great, if exim can use system's crypto library, > to support all system's password hash formats. crypteq should already do that. cu Andreas -- ## subscription configuration (requires account): ## https://lists.exim.org/mailm

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 12:59 Kai Bojens via Exim-users ha scritto: > Everything is possible with Exim+Perl: > > https://www.exim.org/exim-html-current/doc/html/spec_html/ch-embedded_perl.html Do you have an example how to use perl for smtp auth ? I've never used perl in my Exim config

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 14:32 Mike Tubby G8TIC via Exim-users ha scritto: > > As Kai says... everything is possible with Exim+PERL. > > I store user authentication details in salted SHA256 in a MySQL backend > and have Exim call a PERL shim that performs a web-services call to > localho

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 14:39 Odhiambo Washington ha scritto: > I think you could do proxy authentication with a local instance of Dovecot > running on your Exim server. > https://fuerstnet.de/post/2021-07-30-proxy-imap-pop-smtp-using-dovecot-and-postfix/ I prefere to not add additio

[exim] Re: Blowfish auth

2024-05-16 Thread Slavko via Exim-users
Dňa 16. mája 2024 12:39:02 UTC používateľ Odhiambo Washington via Exim-users napísal: > I think you could do proxy authentication with a local instance of Dovecot >running on your Exim server. >https://fuerstnet.de/post/2021-07-30-proxy-imap-pop-smtp-using-dovecot-and-postfix/ Or do UDS -> soca

[exim] Re: Blowfish auth

2024-05-16 Thread Jan Ingvoldstad via Exim-users
On Thu, May 16, 2024 at 2:40 PM Odhiambo Washington via Exim-users < exim-users@lists.exim.org> wrote: > > > I think you could do proxy authentication with a local instance of Dovecot > running on your Exim server. > > https://fuerstnet.de/post/2021-07-30-proxy-imap-pop-smtp-using-dovecot-and-pos

[exim] Re: Blowfish auth

2024-05-16 Thread Odhiambo Washington via Exim-users
On Thu, May 16, 2024 at 12:33 PM Gandalf Corvotempesta via Exim-users < exim-users@lists.exim.org> wrote: > Hi guys > is possible to use blowfish password scheme in exim? > I have some users stored on a DB with a blowfish crypted password, > used by Dovecot > The dovecot server is on a different s

[exim] Re: Blowfish auth

2024-05-16 Thread Mike Tubby G8TIC via Exim-users
As Kai says... everything is possible with Exim+PERL. I store user authentication details in salted SHA256 in a MySQL backend and have Exim call a PERL shim that performs a web-services call to localhost:8080 where Nginx runs my authenticator (written in PHP).  The authenticator receives a POS

[exim] Re: Blowfish auth

2024-05-16 Thread Kai Bojens via Exim-users
Am 16.05.24 um 11:30 schrieb Gandalf Corvotempesta via Exim-users: is possible to use blowfish password scheme in exim? Everything is possible with Exim+Perl: https://www.exim.org/exim-html-current/doc/html/spec_html/ch-embedded_perl.html -- ## subscription configuration (requires account):

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 12:36 Andrew C Aitchison ha scritto: > Is PAM authentication a sensible option in your case ? It could be... as long i'm able to autheticate to users stored on mysql -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/post

[exim] Re: Blowfish auth

2024-05-16 Thread Andrew C Aitchison via Exim-users
On Thu, 16 May 2024, Gandalf Corvotempesta via Exim-users wrote: Hi guys is possible to use blowfish password scheme in exim? I have some users stored on a DB with a blowfish crypted password, used by Dovecot The dovecot server is on a different server than the exim one so i can't use sockets an