only cleartext in sasldb?

Marten Lehmann lehmann at cnm.de
Fri Sep 29 09:36:59 EDT 2006


Hello,

>> it seems that sasldb stores all password in cleartext. Is it possible 
>> to use md5 or crypt as in /etc/passwd?
> 
> Not without breaking non-plaintext mechanisms like CRAM-MD5 and DIGEST-MD5.

that would be a problem, we currently support PLAIN only and don't 
intent to allow anything else (we support SSL).

Regards
Marten


More information about the Info-cyrus mailing list