[Web-cyradm] User authentication is ignored!

[Marcel Hartmann]

Hi,

> Subject: RE: [Web-cyradm] User authentication is ignored!
> 
> Hello,
> 
> > I can't reproduce..
> >
> > I can somehow see another problem:
> > User: test.domain.de
> > pass: test.domain.de
> >
> > # testsaslauthd -u test.domain.de -p test.domain.de
> > 0: OK "Success."
> > # testsaslauthd -u test.domain.de -p test.domain.d
> > 0: OK "Success."
> > # testsaslauthd -u test.domain.de -p test.domain.
> > 0: OK "Success."
> > # testsaslauthd -u test.domain.de -p test
> > 0: NO "authentication failed"
> > # testsaslauthd -u test.domain.de -p test.do
> > 0: NO "authentication failed"
> > # testsaslauthd -u test.domain.de -p test.dom
> > 0: OK "Success."
> >
> > Seems like it is only validating the first 8 chars?
> >
> > I can not authenticate with an arbitray Password and your suggested
change
> did
> > not change anything
> > (for me)
> 
> why not using only 8 chars Passwords? *gg
> 
> OK no Fun jet, I have the same Problem! :-(

After a little bit searching I found thias behavior.
Our Saslauthd is using crypt for Athenticating.
Crypt is only using 8 Characters! Its not a error 
only a Feature from the crypt mech. :-)

I know there is a Version of saslauthd witch can do md5 Passwords,
But I'm using crypt since 2 Jears ago and all works fine. 

A second resolution coul'd be the auxprob plugin with can do cram-md5 etc.
pp.

Regards
Marcel

_____________________________________________

Marcel Hartmann

Bokeler Landstraße 24a    26215 Wiefelstede - Bokel
Tel. 044 02 - 69 50 62	    Fax 044 02 - 69 55 801
e-Mail:                             mail at marcel-hartmann.com