On 10.01.2013 12:44, Thomas Pries wrote:
Hi,
I am currently setting up a Mailserver and decided to use Dovecot as
IMAP/POP3-Server. I read the wiki an thought about how to transmit and
store the passwords (I want to use a MySQL-database).
I want to use encrypted transmission and encrypted storage. The wiki says:
"If you want to use only one non-plaintext mechanism, you can store the
passwords using the mechanism's own password scheme. "
Ok, one secure mechanism is acceptable in my scenario and the wiki gives a list of supported authentication mechanisms and a list of supported
password schemes.
But I am missing the relation between the two
lists, which mechanism
expects which storage scheme?
Did I overlooked any easy answer (other then "read the RFCs").
Best Regards Thomas
Hi Thomas,
its quite simple. If you store the passwords in database in plain text then your server can use any authentication algorithm available. however if you store encrypted/hashed passwords, then the only two available authentication algorithms is: plain as the dovecot needs to properly encode the password
Regards,
M