[Dovecot] APOP and AuthDatabase/SQL

[Timo Sirainen]

On 21.12.2011, at 1.08, Peter Smith wrote:

> We're running dovecot 1.2.15 and use SQL authentication. We'd like to
> be able to support APOP, but can't see how this would fit in with SQL
> auth.
> 
> Currently we have:
> 
> password_query = SELECT email as user, password FROM virtual_users
> WHERE  email='%u' or (email LIKE '%n@%%' AND unhashed='%w')
> 
> It seems that in order to auth APOP logins, we'd need to access
> variables containing the authentication string sent by the client, and
> also variables containing the auth string sent in the POP3 greeting.

The only way to get it working is to have the password_query return the password in plaintext, so Dovecot can do the APOP check. There's no way to get the APOP greeting string.