On 25/03/2013, at 7:33, Charles Bradshaw wrote:
>> That seems very wrong to me.
>
> It might be a kludge, but it's not wrong. It avoids storing plain text
> passwords, which are always a risk. The purpose of MD5 digest is to make
> passwords truly private to the user. Not even root knows users p
Adam
Gently... This question has be asked before, but remains unanswered.
I am using sendmail and cyrus-imapd, not PostFix or LDAP for which the
MD5 password in mysql problem appears to have solved.
On Sun, 2013-03-24 at 14:12 -0400, Adam Tauno Williams wrote:
> On Sun, 2013-03-24 at 14:21 +
On Sun, 2013-03-24 at 14:21 +, Charles Bradshaw wrote:
> In my /etc/imapd.conf I'm using:
> sasl_auxprop_plugin:sql
> sasl_sql_engine:mysql
> I want to store MD5 hashed passwords in my database. Is this possible?
I would *assume* that the database doesn't much care about the
hashing/encoding o
In my /etc/imapd.conf I'm using:
sasl_auxprop_plugin:sql
sasl_sql_engine:mysql
I want to store MD5 hashed passwords in my database. Is this possible?
I was thinking about modifying the sql plugin to MD5 the password before
comparison, but...
I'm no C programmer so understanding sql.c (the plugi