[Dovecot] mysql authentication
I've just managed to get dovecot to install on one of our FreeBSD 5.4 servers, using the ports collection.
I've set up dovecot to query the mysql database I'm using, and the query I'm using is:
SELECT clear AS password FROM users LEFT JOIN domains ON
domains.domain_id = users.domain_id WHERE domain="%d" AND username="%d" AND users.enabled = 1 AND domains.enabled = 1
If I perform this query by hand, I get a single row with the field 'password' which contains the password I'm using the perform my intial test. However, dovecot won't authenticate, and returns this error:
dovecot-auth: mysql(justin@redwiredesign.co.uk): Password mismatch
Is there a way that I can see how dovecot's doing the comparison? I have set the following in dovecot.conf:
auth_verbose = yes
auth_debug = yes
I've read the wiki on raw logging, but I don't know: (a) how to enable this through the port (b) whether this is even applicable as apparently all it logs is the imap traffic.
Any suggestions?
j.
Redwire Design Limited Studio 12 37 Tanner Street London SE1 3LF [ www.redwiredesign.com ] [ 020 7403 1444 ] - voice [ 020 7378 8711 ] - fax
On 15.8.2005, at 11:33, Justin Finkelstein wrote:
SELECT clear AS password FROM users LEFT JOIN domains ON domains.domain_id = users.domain_id WHERE domain="%d" AND username="%d" AND users.enabled = 1 AND domains.enabled = 1
So the password is in cleartext? Have you changed default_pass_scheme to plain?
dovecot-auth: mysql(justin@redwiredesign.co.uk): Password mismatch
Is there a way that I can see how dovecot's doing the comparison? I have set the following in dovecot.conf:
No. I think it's maybe a bit too much to log passwords.. It's usually just that the scheme is wrong anyway.
I've read the wiki on raw logging, but I don't know: (a) how to enable this through the port (b) whether this is even applicable as apparently all it logs is the imap traffic.
Rawlog isn't able to log preauthentication traffic.
participants (2)
-
Justin Finkelstein
-
Timo Sirainen