Save user passwords in clear text

Lefteris Tsintjelis

5 Aug 2016 5 Aug '16

9:01 p.m.

Is it possible to save user passwords as clear text through dovecot? I am currently using MD5 passwords and I allow only "plain and login” mechanisms but I want to switch my database to clear text as this will give me the ability to use more mechanisms such as CRAM-MD5. Is this possible?

Thank you

Show replies by date

Michael Fox

6 Aug 6 Aug

4:39 a.m.

...

I'm not sure if this is what you mean by saving passwords "through dovecot". But here's how to save a clear-text password when the passdb scheme is not plaintext.

Use the {PLAIN} prefix. Example:

10-auth.conf: passdb { driver = passwd-file args = scheme=cram-md5 username_format=%n /path/passdb }

/path/passdb: username:{PLAIN}secret

User "username" can log in with password "secret"

Michael

Steffen Kaiser

8 Aug 8 Aug

1:39 p.m.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On Fri, 5 Aug 2016, Lefteris Tsintjelis wrote:

...

Someone tried to do something like that with:

http://wiki2.dovecot.org/AuthDatabase/CheckPassword

Check the archive of this list.

Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1

iQEVAwUBV6hvY3z1H7kL/d9rAQK/iAf/XNP52dpnKIoXvhounpTg58QgIoY+i1tW oka3uAfjFiwyNH/QzZaEdISaogWqpxKXmebWNZeyjvScGzM5VAoC6XMbmvuUfoaC /gwpadMez416RlTnGpfTvB9GIV+5F8UE+4wCPAnP8Vzp9zCBueKhTrq4q8Ffevfj z1ikHWIQI8wwFdTNI82Iyybw4S6F2vWGrR/ypHHWyNhRH6bluMTLc9UOBGORMFc4 eTeARYIFjDYM6RVZBPlRmoFXZ+qUy72tIV8PyqYbcFlC61lPMsYKleXgDT5KH/V6 r62h4vYCyJn8uGxCwuNmxq9uQws0fRfL2rIgdVuauGxkGmPphgizlw== =UW2U -----END PGP SIGNATURE-----