[Dovecot] ldap and digest-md5 problem

[Timo Sirainen]

On Sat, 2007-05-05 at 16:13 +0200, Łukasz Mierzwa wrote:
> May  5 16:03:32 srv dovecot: auth(default): digest-md5
> (user at domain.com,127.0.0.1): password mismatch
..
> It seems that client and dovecot hashes calculated for DIGEST-MD5 are 
> different, I tested squirrelmail 1.4.9a, kmail 3.5.6 both can't login using 
> digest-md5 so maybe dovecot does not working correctly? Passwords where 
> created using phpldapadmin and "clear" password type, cram-md5 logins are ok.
> I can't find any info on ldap and digest-md5 incompatibility in dovecot wiki, 
> can anyone give my a hint?

I'm guessing they're using a different username in the hash calculation.
DIGEST-MD5 hashes are a bit special because they contain the username
also in them.

> auth_default_realm = pcserwis.net
> auth_username_format = %Lu

If you're not logging in as lowercased user at pcserwis.net that's the
problem. Or any other mismatch in the username as well.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20070509/c6a809fe/attachment.pgp