Hi Info,

Three notes first:

- Writing in German to this list ain't a really good idea. Germans will
  be the minority here, so english is the preferred language.
- Sending your answer to the list is enough, I'm reading the list and
  don't need a copy in my PM mailbox.
- Setting "Reply-To" in your mails to anything different than this lists
  address is a bad idea, unless your mail is going to be OT and you want
  answers _only_ via PM. While you expect answers helping with your
  vpopmail problem you should set Reply-To to <[EMAIL PROTECTED]> or
  leave it empty.


On Wed, 18 Dec 2002 21:34:41 +0100
"Info @ wdc" <[EMAIL PROTECTED]> wrote:

>>> Now I have a new system with mysql-support
>> [...]
>>> But md5-driven auth fails, because the auth-process log into the
>>> system with a md5-key, which is not the same as the normal password
>>> of the user.

>> - log output of vchkpw

> Dec 18 21:08:23 mx2 /var/log/vpopmail.log[23809]: vchkpw-pop3:
> password fail [EMAIL PROTECTED]:217.235.36.51

OK, so it seems to lookup the correct user.

>> - log output of MySQL which select statements were given?

> Also die Abfrage scheitn so auf die Tabelle zu laufen, dass statt nach
> dem Passwort plain ein md5-gecryptetes Passwort abgefragt wird. -> es
> wird generell, s.o. kein plain Pass abgefragt.

[ rough translation]
| The query seems to request no plain text but only MD5-crypted
| password.

That's not correct.

> select pw_name, pw_passwd, pw_uid, pw_gid, p w_gecos, pw_dir, 
> pw_shell , pw_clear_passwd from vpopmail where 
> pw_name = "billing" and pw_domain = "w-d-c.net"

This query fetches the whole data set, _including_ clear password
(pw_clear_passwd).
Have you done this query manually to see if the result contains the
clear text password?

As I don't run a MySQL backend for vpopmail authentication myself, could
anybody who does have a look if APOP is working in general with MySQL as
user data storage?

BTW: Christian, it might be usefull knowing which version of vpopmail
you're using, you didn't provide this information yet.
-- 
Peter

Reply via email to