atom feed43 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Re: LDAP authenti...
FromSent OnAttachments
Graham LeggettJul 17, 2001 7:21 am 
Graham LeggettJul 17, 2001 2:35 pm 
Sam VarshavchikJul 17, 2001 2:47 pm 
Graham LeggettJul 17, 2001 3:23 pm 
Sam VarshavchikJul 17, 2001 3:34 pm 
pop cornJul 17, 2001 3:41 pm 
Graham LeggettJul 17, 2001 3:54 pm 
pop cornJul 17, 2001 3:57 pm 
Sam VarshavchikJul 17, 2001 4:17 pm 
Sam VarshavchikJul 17, 2001 4:18 pm 
Sam VarshavchikJul 17, 2001 4:19 pm 
pop cornJul 17, 2001 4:26 pm 
pop cornJul 17, 2001 4:36 pm 
Sam VarshavchikJul 17, 2001 4:39 pm 
Sam VarshavchikJul 17, 2001 4:48 pm 
Graham LeggettJul 17, 2001 4:49 pm 
pop cornJul 17, 2001 4:52 pm 
pop cornJul 17, 2001 4:53 pm 
pop cornJul 17, 2001 4:55 pm 
Sam VarshavchikJul 17, 2001 6:59 pm 
Sam VarshavchikJul 17, 2001 7:03 pm 
pop cornJul 17, 2001 8:07 pm 
pop cornJul 17, 2001 8:08 pm 
Sam VarshavchikJul 17, 2001 8:25 pm 
pop cornJul 17, 2001 10:06 pm 
Graham LeggettJul 18, 2001 2:02 am 
Sam VarshavchikJul 18, 2001 4:49 am 
pop cornJul 18, 2001 5:20 am 
Sam VarshavchikJul 18, 2001 2:34 pm 
pop cornJul 18, 2001 8:36 pm 
Sam VarshavchikJul 18, 2001 9:42 pm 
Eric SmithJul 18, 2001 9:50 pm 
Sam VarshavchikJul 18, 2001 10:09 pm 
Eric SmithJul 18, 2001 10:35 pm 
pop cornJul 18, 2001 10:44 pm 
Daniel BiddleJul 18, 2001 10:51 pm 
Daniel BiddleJul 18, 2001 11:01 pm 
Sam VarshavchikJul 19, 2001 5:05 am 
Eric SmithJul 19, 2001 2:23 pm 
Gordon MessmerJul 20, 2001 3:29 pm 
Eric SmithJul 20, 2001 5:10 pm 
Sam VarshavchikJul 20, 2001 6:17 pm 
Gordon MessmerJul 20, 2001 7:34 pm 
Subject:Re: [courier-users] Re: LDAP authentication fails with nothing logged
From:Daniel Biddle (del@osian.net)
Date:Jul 18, 2001 10:51:28 pm
List:net.sourceforge.lists.courier-users

On Wed, Jul 18, 2001 at 05:06:07AM +0000, pop corn wrote:

I found that openldap 1.2.11 ldappasswd utility generates a different format (base64) MD5 than the digest utility distributed with qmail. Therefore, I have to use the digest utility if I want to use MD5 with qmail-pop3d.

What does ldappasswd generate for the password 'secret'?

The ldappasswd utility in openldap 1.2.11 generates any one of the -H none|crypt|md5|smd5|sha|ssha encryptions. However, only the crypt encryption works with qmail-pop3d. The equivalent of ldappasswd is called slappasswd in openldap 2.x. The md5 that slappasswd generates works with qmail-pop3d.

I think you mean qmail-popup in conjunction with a checkpassword-like program (auth_pop, right?). Authentication has already happened by the time qmail-pop3d is invoked, at least in standard qmail-pop3d.

I didn't bring this up before because you clearly don't want to hear qmail mentioned, but qmail does in fact distribute a "digest" utility that works as follows:

# ./digest secret {MD4}Z9Pa/vY/8AYDru83ac+/DQ== {MD5}Xr4ilOzQ4PCOq3aQ0qbuaQ== {RMD160}zZi/AgLvB+OOh/a9lEXl5zMeLHg= {SHA}5en6G6MezRroT3XKqkdPOmY/BfQ=

I have qmail, but no digest program: I think you meant qmail-ldap. (auth_imap is also from qmail-ldap.)

I have to do this:

printf secret | md5sum | xxd -r -ps | mmencode Xr4ilOzQ4PCOq3aQ0qbuaQ==

(printf is from bash, md5sum from GNU textutils, xxd from vim, mmencode from metamail.)

thanks,