Re: Storing SASL passwords in database in hashed form (e.g. PBKDF2)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 30.01.2014 22:29, Johannes Bauer wrote:

> I'm also well aware that this limits Postfix to PLAIN authentication.
> This is perfectly fine as I'm exclusively using smtps (i.e. TLS) and
> therefore is not a problem. Having plain text passwords in a database is.

Already fixed the problem. The solution was to ditch cyrus-sasl in favor
of dovecot-sasl. Dovecot has the ability to store salted passwords and
provides easy access to database backends (i.e. no fiddling with PAM
modules or such) and on top of it all it produces fantastic log messages
and is therefore really easy to setup.

Sorry for disturbing the list,
Cheers,
Johannes




[Index of Archives]     [Info Cyrus]     [Squirrel Mail]     [Linux Media]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux