Re: auxprop pwcheck with sasl ldapdb and openldap backend not working
"PFiver via SASL" <[email protected]> Sat, 6 Nov 2021 17:43:32 -0400
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
btw. the reason why I thing auxprop-hashed will not work in ldap, is this: ➜ cyrus-sasl git:(master) git describe HEAD cyrus-sasl-2.1.27-182-gd00e7332 ➜ cyrus-sasl git:(master) git grep SASL_AUXPROP_VERIFY_AGAINST_HASH include/saslplug.h:#define SASL_AUXPROP_VERIFY_AGAINST_HASH 0x10 plugins/sasldb.c: verify_against_hashed_password = flags & SASL_AUXPROP_VERIFY_AGAINST_HASH; plugins/sasldb.c: is always present if SASL_AUXPROP_VERIFY_AGAINST_HASH is specified. plugins/sasldb.c: When SASL_AUXPROP_VERIFY_AGAINST_HASH is set, we just clear userPassword. */ plugins/sql.c: verify_against_hashed_password = flags & SASL_AUXPROP_VERIFY_AGAINST_HASH; plugins/sql.c: is always present if SASL_AUXPROP_VERIFY_AGAINST_HASH is specified. plugins/sql.c: When SASL_AUXPROP_VERIFY_AGAINST_HASH is set, we just clear userPassword. */ And I generally get the impression, that the SASL ldapdb module is generally "not in very good shape". Now I am trying to find out about that /etc/*/Cyrus.conf ... ------------------------------------------ Cyrus: SASL Permalink: https://cyrus.topicbox.com/groups/sasl/T2c60ca246b64197b-Mea498240d3dae2f8a9b9a5fe Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription