Conversion of APOP users

Ezio Paglia <ezio-sOFouQoV90PFIYnzvfs/[email protected]>
Newsgroups gmane.comp.isp.ispman.user
Message-ID <[email protected]>
Hi all,

and thanks for your previous answers.
I need to populate my ispman ldap with users coming from an APOP 
authentication. We still have a qpopper server (5000 users with APOP and 
1000 users with PASSWORS) and are trying to test the migration toward 
ispman. I have seen that PASSWORDS authentication is well converted, but 
sincerely I do not know what to do for APOP users.
In apop the users and their crypted passwords are kept in a gdbm file; a 
user sends the server the username plus only a digest of a string obtained 
through md5 of the concatenation of the password with a secret number.
Only to better explain the difference between the usual passwords and 
qpopper APOP, here follows a more practical example, extracted from a very 
bad perl program of mine (please do not laugh) , in which I allowed my 
users to test and change their authentication method and their password 
from the web.

..
         $dest = sockaddr_in (110, inet_aton ('*****'));
         connect (SH, $dest) || die $!;
         $ingresso=<SH>;
         if ($oldmeth eq 'APOP')
#APOP
                 {
                 $ingresso=~s/.*</</;
                 ($ingresso,$dummy)=split (/>/,$ingresso);
                 $ingresso.='>';
                 $stringa=$ingresso.$oldpass;
                 $digest= md5_hex($stringa);
                 send (SH, "apop $utente $digest\n",0);
                 }
         else
#PASSWORDS
                 {
                 send (SH, "user $utente\n",0);
                 $ingresso=<SH>;
                 send (SH, "pass $oldpass\n",0);
                 }
         $ingresso=<SH>;
         if ( substr($ingresso,1,2) eq 'OK' )
....

Do you know whether a conversion is possible or do you think I need to make 
my users pass through passwords authentication ?

Ciao and thank you.
Ezio.
--
Ezio Paglia
Sistema Informativo e Architetture
SED Comune di Grosseto



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.