Re: MD5 Passwords in MySql?

2013-03-25 Thread Adam Tauno Williams
On Mon, 2013-03-25 at 17:03 -0500, Scott Lambert wrote: > On Mon, Mar 25, 2013 at 09:32:16PM +, Charles Bradshaw wrote: > > Andy > > Thanks for the link. If you read on you will see that while PAM allows > > storage of encrypted passwords in mysql, DIGEST-MD5 and CRAM-MD5 can > > then NOT be us

Re: MD5 Passwords in MySql?

2013-03-25 Thread Scott Lambert
On Mon, Mar 25, 2013 at 09:32:16PM +, Charles Bradshaw wrote: > Andy > > Thanks for the link. If you read on you will see that while PAM allows > storage of encrypted passwords in mysql, DIGEST-MD5 and CRAM-MD5 can > then NOT be used. That's definitely as step in the wrong direction. > > I'm

Re: MD5 Passwords in MySql?

2013-03-25 Thread Charles Bradshaw
Andy Thanks for the link. If you read on you will see that while PAM allows storage of encrypted passwords in mysql, DIGEST-MD5 and CRAM-MD5 can then NOT be used. That's definitely as step in the wrong direction. I'm coming to the conclusion that I need understand the code well enough to add some

Re: MD5 Passwords in MySql?

2013-03-25 Thread Andrew Morgan
On Sun, 24 Mar 2013, Charles Bradshaw wrote: > In my /etc/imapd.conf I'm using: > > sasl_auxprop_plugin:sql > sasl_sql_engine:mysql > > I want to store MD5 hashed passwords in my database. Is this possible? > > I was thinking about modifying the sql plugin to MD5 the password before > comparison,

Strange locking problems

2013-03-25 Thread Michael Plate
Hi, I am using postfix / cyrus on a Gentoo Linux box for ahem...a while (10 years) now. Current cyrus is 2.4.17, postfix 2.9.5 , the box is a dual Xeon (2.4 GHz, family 15, model2, stepping 7), 2 GB memory, a HW RAID 5 (ICP Vortex, now Intel), and yes it 10 years old this year. Never had prob

Re: MD5 Passwords in MySql?

2013-03-25 Thread Charles Bradshaw
Adam The end goal was simply stated previously: 'To store MD5 hashed passwords in a mysql database'. My reasons for wanting to do so are complex and NOT the subject of the thread. Had I been seeking general advice about possibilities I might have asked: Is it advisable to do such and such? Or may

Unexpected mailbox reservations

2013-03-25 Thread janne . peltonen
I found this in the mailing list archive: http://lists.andrew.cmu.edu/pipermail/info-cyrus/2009-November/032078.html However, there were no answers. John, did you figure it out? We seem to have run into sth similar: we have two users the quotas of whom can't be changed. Nor shown using ima

Re: MD5 Passwords in MySql?

2013-03-25 Thread Adam Tauno Williams
On Mon, 2013-03-25 at 11:40 +, Charles Bradshaw wrote: > Yes I understand and accept the weakness of MD5. In the world of > exponentially increasing processing power there will always be weakness, > of ANY scheme. > The question is not however about the efficacy of encryption methods! > It's a

Re: MD5 Passwords in MySql?

2013-03-25 Thread Charles Bradshaw
Daniel Yes I understand and accept the weakness of MD5. In the world of exponentially increasing processing power there will always be weakness, of ANY scheme. The question is not however about the efficacy of encryption methods! It's about how to achieve password hashing in a mysql database. I