[Dovecot] MySQL stored proc authorization

[Timo Sirainen]

On Sat, 2006-10-14 at 00:08 +0200, Chaos Engine wrote:

>                db->client_flags |= CLIENT_MULTI_STATEMENTS;

> 
>         
> 
> Yes, most probably the lack of this CLIENT_MULTI_STATEMENTS flag
> blocks stored procs (acording to MySQL docs).
> From my point of view using stored proc is more secure than putting
> select user, password from user_sensitive_data_table into
> dovecot-sql.conf, but I'll live with that.
> You most probably had your reasons, and ultimately I agree -
> security first ;-)

Now that I think of it, you can actually enable this again. Add to
connect string in dovecot-sql.conf:

client_flags = 64

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20061014/8fcca8a1/attachment.pgp