[Dovecot] mysql authentication

[Timo Sirainen]

On 15.8.2005, at 11:33, Justin Finkelstein wrote:

> 	SELECT clear AS password FROM users LEFT JOIN domains ON
> domains.domain_id = users.domain_id WHERE domain="%d" AND 
> username="%d" AND
> users.enabled = 1 AND domains.enabled = 1

So the password is in cleartext? Have you changed default_pass_scheme 
to plain?

> 	dovecot-auth: mysql(justin at redwiredesign.co.uk): Password mismatch
>
> Is there a way that I can see how dovecot's doing the comparison? I 
> have set
> the following in dovecot.conf:

No. I think it's maybe a bit too much to log passwords.. It's usually 
just that the scheme is wrong anyway.

> I've read the wiki on raw logging, but I don't know: (a) how to enable 
> this
> through the port (b) whether this is even applicable as apparently all 
> it
> logs is the imap traffic.

Rawlog isn't able to log preauthentication traffic.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20050815/7d81c185/PGP.pgp