Discussion:
[courier-users] SHA in userdb
SZÉPE Viktor
2017-07-23 19:14:49 UTC
Permalink
Hello!

Would it be possible to document secure hash (SHA-256) support in userdb?
systempw=$5$....
Produced with mkpasswd --method=sha-256 PASS SALT

Thanks.



SZÉPE Viktor, üzemeltetés
https://github.com/szepeviktor/debian-server-tools/blob/master/CV.md
--
+36-20-4242498 ***@szepe.net skype: szepe.viktor
Budapest, III. kerület
Sam Varshavchik
2017-07-24 10:58:49 UTC
Permalink
Post by SZÉPE Viktor
Hello!
Would it be possible to document secure hash (SHA-256) support in userdb?
systempw=$5$....
Produced with mkpasswd --method=sha-256 PASS SALT
What do you mean "document"?
SZÉPE Viktor
2017-07-24 11:07:33 UTC
Permalink
Post by Sam Varshavchik
Post by SZÉPE Viktor
Hello!
Would it be possible to document secure hash (SHA-256) support in userdb?
systempw=$5$....
Produced with mkpasswd --method=sha-256 PASS SALT
What do you mean "document"?
Just mention it somewhere.
For example on this man page
http://www.courier-mta.org/authlib/userdbpw.html



SZÉPE Viktor, üzemeltetés
https://github.com/szepeviktor/debian-server-tools/blob/master/CV.md
--
+36-20-4242498 ***@szepe.net skype: szepe.viktor
Budapest, III. kerület
Sam Varshavchik
2017-07-24 15:47:32 UTC
Permalink
Post by SZÉPE Viktor
Post by Sam Varshavchik
Post by SZÉPE Viktor
Hello!
Would it be possible to document secure hash (SHA-256) support in userdb?
systempw=$5$....
Produced with mkpasswd --method=sha-256 PASS SALT
What do you mean "document"?
Just mention it somewhere.
For example on this man page
http://www.courier-mta.org/authlib/userdbpw.html
The userdbpw tool can only generate the '$1$'-formatted passwords.

userdbpw does support the -hmac-sha256 option, which is something else,
but which I'll add to the documentation.
SZÉPE Viktor
2017-07-24 19:03:58 UTC
Permalink
Post by Sam Varshavchik
Post by SZÉPE Viktor
Post by Sam Varshavchik
Post by SZÉPE Viktor
Hello!
Would it be possible to document secure hash (SHA-256) support in userdb?
systempw=$5$....
Produced with mkpasswd --method=sha-256 PASS SALT
What do you mean "document"?
Just mention it somewhere.
For example on this man page
http://www.courier-mta.org/authlib/userdbpw.html
The userdbpw tool can only generate the '$1$'-formatted passwords.
userdbpw does support the -hmac-sha256 option, which is something else,
but which I'll add to the documentation.
Thank you.

I think you are able to choose a proper location to mention that
secure sha-256 passwords could be generated by mkpasswd (but not by
userdbpw)




SZÉPE Viktor, üzemeltetés
https://github.com/szepeviktor/debian-server-tools/blob/master/CV.md
--
+36-20-4242498 ***@szepe.net skype: szepe.viktor
Budapest, III. kerület
Loading...