----- Original Message ----- From: "Paul L. Allen" <[EMAIL PROTECTED]> To: "Michael Bowe" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, October 13, 2003 10:52 PM Subject: [vchkpw] Re: Learn passwords with Courier IMAP
> > Michael Bowe writes: > > > As far as I know, Courier-IMAP uses it's own functions to auth the > > password, > > Yes and no. Courier-IMAP and the Courier POP3 server do have their > own authentication routines which are effectively wrappers calling > whatever authentication method you actually use. So if you tell Courier > to use vchkpw authentication than it does end up using the vpopmail > stuff. To auth a username/password, Courier-IMAP takes the supplied username and runs vpopmail's vauth_getpw() to retrieve the user's passwd entry. Courier-IMAP then crypts the supplied password and compares this against the (crypted) pw entry supplied by vauth_getpw() If the passwords match then the auth is declared a success Password learning is all done in the vpopmail's vchkpw() function, which Courier-IMAP doesnt use Michael.
