From: Andreas Winkelmann (ml at awinkelmann dot de)
Date: Wed Jun 23 2004 - 17:43:23 EDT
Am Mittwoch, 23. Juni 2004 23:08 schrieb Florian Lindner:
> > > my SMTP-Server with cyrus-sasl 2.1.14 as the backend propagate CRAM-MD5
> > > and DIGEST authentication for SMTP auth. But only plain is working.
> > > My smtp.conf:
> > >
> > > pwcheck_method: saslauthd
> > >
> > > saslauthd is started with -a pam.
> >
> > I order for shared secret mechs like CRAM-MD5 and DIGEST-MD5 to work,
> > you must have the user's secrets in an auxprop backend like sasldb,
> > ldap, sql, etc.
>
> Before that I was told that PAM is not working with auxprop... So I can use
> cram-md5 or digest with PAM?
No. But regardless of the using auxprop-backend, your Passwords must be stored
in plaintext. What do you use behind pam? If passwd/shadow, the
*-md5-Mechanisms are not possible, at all. If you use mysql or ldap, there
are auxprop-plugins.
-- Andreas
|
|
|