libsasl2-modules-sql without crypt support on debian etch
Hi!
I'm having a cyrusIMAP / Postfix configuration that is working very well
on a debian etch system.
The authentification is working with auxprop and mysql.
But I have a little problem that i'd like to get solved:
The package libsasl2-modules-sql doesn't have crypt support. So
sasl_password_format isn't a known option.
For that reason I have to work with plaintext passwords which is not the
most secure solution.
For other distributions there is already a patched version available
(e.g. you can install it on gentoo machines with USE="crypt" emerge
cyrus-sasl). But I prefer having a debian based system and i've already
set it up.
So, will this feature be implemented in future versions of this package?
Is there a deb-package available that contains this patch?
I hope i'm on the right mailinglist for this issue. If not, please give
me a hint.
Here's some information that might be interesting:
/etc/imapd.conf:
#START##############################
.....
sasl_mech_list: PLAIN
sasl_password_format: crypt
sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sql
sasl_sql_hostnames: localhost
sasl_sql_database: postfix
sasl_sql_user: postfix
sasl_sql_passwd: XXXXX
sasl_sql_select: select password from users where login='%u' and status='1'
.....
#END###############################
/etc/postfix/smtp.conf bzw. smtpd.conf:
#START##############################
pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: plain login
password_format: crypt
sql_engine: mysql
sql_hostnames: localhost
sql_user: postfix
sql_passwd: XXXXX
sql_database: postfix
sql_verbose: yes
sql_select: select password from users where login='%u' and status='1'
#END###############################
Kind Regards
Christian Schramm
Reply to: