[Dovecot] Password mismatch - SHA1 authentication problem.

guard guard at uptime.pl
Sat Sep 9 11:59:10 EEST 2006



On Thu, 31 Aug 2006, guard wrote:

> 
> Hello,
> I have problem with authentication.
> I'm using SHA1 passwords stored in MySQL.
> 
> From debug:
> Info: auth-worker(default): sql(test at mail, IP): query: SELECT password FROM 
> vmail WHERE mail = 'test at mail'
> Info: auth-worker(default): sql(test at mail ,IP): Password mismatch
> Info: auth-worker(default): sql(test at mail ,IP): SHA1(dupadupa) != 
> '2bca9dbe8a14811c687bb8c51c0e1cd14db8a018'
> 
> I tried convert password to upper case, but it didn't help. Then I
> tried authentication in plain text and everything works fine...
> So, does dovecot crypt SHA1 using other method?
> 
> I also use same SHA1 passwords to authenticate users in exim and it doesn't 
> have any problem with that.
> 
> I'm using mysql 5.0.24 and dovecot 1.0 rc7.

I have found the reason why i can not authenticate users using SHA1 passowds.
Problem is dovecot stores sha1 as "sum of the password stored in base64" but 
mysql and exim store it in hex.

Question is why, and does anyone have patch for it?

Best regards,
Tomasz Krynicki


More information about the dovecot mailing list