[Dovecot] Dovecot CRAM-MD5 & DIGEST-MD5

Chris Laif chris.laif at googlemail.com
Wed Jul 9 00:59:42 EEST 2008


On Tue, Jul 8, 2008 at 5:39 PM, Proskurin Kirill <k.proskurin at fxclub.org> wrote:
>
> Error: auth(default): password(admin3 at domain.off,172.16.1.19): Invalid password format for scheme CRAM-MD5
>
> dovecot-ldap.conf:
> default_pass_scheme = CRAM-MD5
>

Set default_pass_scheme to PLAIN as you store passwords in plain text.

For improved security, store the passwords in HMAC-MD5-format.

For CRAM-MD5 auth you do not need to store the password in PLAIN
format. It is ok to store the password in HMAC-MD5 format.

For DIGEST-MD5 you need to store the pass in PLAIN format.

Chris


More information about the dovecot mailing list