[Dovecot] Password mismatch - SHA1 authentication problem.

Timo Sirainen tss at iki.fi
Sun Oct 8 23:56:49 UTC 2006


On Thu, 2006-08-31 at 22:37 +0200, guard wrote:
> Hello,
> I have problem with authentication.
> I'm using SHA1 passwords stored in MySQL.
> 
> >From debug:
> Info: auth-worker(default): sql(test at mail, IP): query: SELECT 
> password FROM vmail WHERE mail = 'test at mail'
> Info: auth-worker(default): sql(test at mail ,IP): Password mismatch
> Info: auth-worker(default): sql(test at mail ,IP): SHA1(dupadupa) != 
> '2bca9dbe8a14811c687bb8c51c0e1cd14db8a018'

In case you didn't yet figure this out, there's a small difference..
Dovecot wants SHA1-passwords to be base64-encoded, while the password
above is hex-encoded.

Hmm. I think this could be detected automatically based on just the
length of the string.. Yea, I think I'll change the code to handle both
cases automatically.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20061009/604cd08f/attachment-0001.pgp 


More information about the dovecot mailing list