how to enable digestmd5 and crammd5 ?
    Carson Gaspar 
    carson at taltos.org
       
    Fri Apr 20 01:31:41 EDT 2007
    
    
  
Goetz Babin-Ebell wrote:
> The problem is that cram-md5 and digest-md5 need direct access to the
> pass phrase in plain text.
> AFAIK LDAP doesn't support this.
> You have to use TLS if you want to transmit the pass phrase securely...
Technically not true, you need the password hashed with the username and 
realm. But cyrus-sasl dropped support for storing the hashes a long time 
ago and has never brought it back.
I can't comment on the LDAP plugin's ability to store/retreive plain 
text passwords, as I've never used it.
-- 
Carson
    
    
More information about the Info-cyrus
mailing list