Just in case someone else runs into this...

I solved the problem that I described below by switching the password encoding to base64. Also, with django, you have to monkey patch (based on info from [1]) the set_password function in django.contrib.auth.models.User. You also have to use a UserProfile like described at [2]. Code below goes in models.py for your project.

import hashlib import base64

from django.contrib.auth.models import User

# Save original User set_password method orig_set_password = User.set_password

def set_password(user, raw_password): if user.id == None: user.save()

 # Use the original method to set the django User password:
 orig_set_password(user, raw_password)

 userprofile, created = UserProfile.objects.get_or_create(user=user)

 # Save the salt and sha digest in the correct format for dovecot
 m = hashlib.sha1()

 userprofile.salt = user.password.split('$')[1]

 m.update(raw_password)
 m.update(userprofile.salt)

 userprofile.shadigest = base64.b64encode(m.digest() + userprofile.salt)

 userprofile.save()

# Replace the method with the custom set_password User.set_password = set_password

[1] https://github.com/jedie/PyLucid/blob/master/pylucid_project/apps/pylucid/mo... [2] https://docs.djangoproject.com/en/1.3/topics/auth/#storing-additional-inform...

On 8/7/2011 12:53 PM, Benjamin Montgomery wrote:

Hello everyone,

I'm trying to make dovecot do user authentication against a SQL database. The passwords (managed by Django) are stored as salted SHA1 encoded in hex. I monkey patched Django's password method so that the password hash is made with <password><salt> (Django does <salt><password>, the patched method was verified to return same value as dovecotpw) and the passwords are stored in the database separately as the salted hash and the salt. When I query the values out of the database, I'm using MySQL's concat function to return the password as {SSHA.hex}<sha1 hash><salt>. Dovecot is not able to verify any passwords right now. I've scoured the wiki and I think my setup is correct...config info is below. Any advice on where to look for debugging or setup of my passwords would be appreciated!

Ben

dovecot-sql.conf:

default_pass_scheme = SSHA.hex

password_query =
SELECT emailmanager_emailaddresses.account AS username,
emailmanager_domain.name AS domain,
CONCAT('{SSHA.hex}',
emailmanager_userprofile.shadigest,
emailmanager_userprofile.salt
) AS password
FROM emailmanager_emailaddresses
JOIN emailmanager_domain ON emailmanager_emailaddresses.id = emailmanager_domain.id
JOIN emailmanager_userprofile ON emailmanager_emailaddresses.id = emailmanager_userprofile.id
WHERE emailmanager_emailaddresses.account = '%n'
AND emailmanager_domain.name = '%d'