Re: MD5 Passwords in MySql?

2013-03-24 Thread Daniel O'Connor
On 25/03/2013, at 7:33, Charles Bradshaw wrote: >> That seems very wrong to me. > > It might be a kludge, but it's not wrong. It avoids storing plain text > passwords, which are always a risk. The purpose of MD5 digest is to make > passwords truly private to the user. Not even root knows users p

Re: MD5 Passwords in MySql?

2013-03-24 Thread Charles Bradshaw
Adam Gently... This question has be asked before, but remains unanswered. I am using sendmail and cyrus-imapd, not PostFix or LDAP for which the MD5 password in mysql problem appears to have solved. On Sun, 2013-03-24 at 14:12 -0400, Adam Tauno Williams wrote: > On Sun, 2013-03-24 at 14:21 +

Re: MD5 Passwords in MySql?

2013-03-24 Thread Adam Tauno Williams
On Sun, 2013-03-24 at 14:21 +, Charles Bradshaw wrote: > In my /etc/imapd.conf I'm using: > sasl_auxprop_plugin:sql > sasl_sql_engine:mysql > I want to store MD5 hashed passwords in my database. Is this possible? I would *assume* that the database doesn't much care about the hashing/encoding o

MD5 Passwords in MySql?

2013-03-24 Thread Charles Bradshaw
In my /etc/imapd.conf I'm using: sasl_auxprop_plugin:sql sasl_sql_engine:mysql I want to store MD5 hashed passwords in my database. Is this possible? I was thinking about modifying the sql plugin to MD5 the password before comparison, but... I'm no C programmer so understanding sql.c (the plugi