1 Topic by frankseu

  • frankseu
  • Member
  • Offline
  • Registered: 2012-03-10
  • Posts: 4

Topic: Authentication on Ubuntu 10.04/SOGo/iredmail/MySQL Backend

Hello,

i am running the iredmail 0.7.4 apliance on Ubuntu 10.04 LTS with mysql backend.
Now i installed SOGo and got it (more or less) working with mysql backend.
My problem is that when i change the password of a user in Iredadmin i can logon in roundcube mail but not on Sogo. When i Change the passwort in SOGo i can connect in sogo but not in roundcube anymore, also SOGo can not connect to the IMAP Server.
The SOGo User Table in mysql is just a view on the vmail.mailbox Table created by this:
select `vmail`.`mailbox`.`username` AS `c_uid`,`vmail`.`mailbox`.`name` AS `c_name`,`vmail`.`mailbox`.`password` AS `c_password`,`vmail`.`mailbox`.`name` AS `cn`,`vmail`.`mailbox`.`username` AS `mail` from `vmail`.`mailbox`.

In SOGo i configured:
<key>userPasswordAlgorithm</key>
<string>md5</string>

Can anyone help please?
Regards
Frank

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Authentication on Ubuntu 10.04/SOGo/iredmail/MySQL Backend

iRedMail stores MD5 hashed password with salt. Not sure what SOGo does. sad

3 Reply by frankseu (edited by frankseu 2012-03-12 03:20:26)

  • frankseu
  • Member
  • Offline
  • Registered: 2012-03-10
  • Posts: 4

Re: Authentication on Ubuntu 10.04/SOGo/iredmail/MySQL Backend

Hello,
and thanks for the answer.
I had a look arround and found out that SOGo only supports "normal" MD5 or PLAIN.
Is it possible to change your appliance to MD5 without salt?


Frank

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Authentication on Ubuntu 10.04/SOGo/iredmail/MySQL Backend

Try below steps:

1) Change password in SOGo.
2) Update Dovecot config file (/etc/dovecot/dovecot-mysql.conf) with below setting, restart Dovecot service after changed:

default_pass_scheme = PLAIN-MD5

Then it should work for POP3/IMAP/SMTP and SOGo.

Please let me know if it works for you or not. If it does work, i will update iRedAdmin-Pro to support MD5 password without salt in next release.

5 Reply by frankseu

  • frankseu
  • Member
  • Offline
  • Registered: 2012-03-10
  • Posts: 4

Re: Authentication on Ubuntu 10.04/SOGo/iredmail/MySQL Backend

Hello,
and thanks again for your fast reply.
Ich will try it this afternoon.

At the moment in my dovecot-mysql.conf if have default_pass_scheme=crypt

As i would like to understand the stuff please allow my following querstions:

- Is CRYPT the MD5 hashed password with salt you spoke about?

- Sogo also supports CRYPT with mysql backend for authentication.
  Shall i  give that a try or are there different CRYPT implementations out there?

- Do i have to set the $CONF['encrypt'] =    to any other value in the postfix configuration?

I am totaly confused with CRYPT/MD5/MD5-CRYPT/MD5-PLAIN  and so on.

Thanks
Frank

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Authentication on Ubuntu 10.04/SOGo/iredmail/MySQL Backend

frankseu wrote:

- Is CRYPT the MD5 hashed password with salt you spoke about?

No.

About Dovecot setting "default_pass_scheme = CRYPT", please refer to the Dovecot wiki article:

- Password schemes handled in Dovecot:
  http://wiki.dovecot.org/Authentication/PasswordSchemes

frankseu wrote:

- Sogo also supports CRYPT with mysql backend for authentication.
  Shall i  give that a try or are there different CRYPT implementations out there?

You should give it a try first.

frankseu wrote:

- Do i have to set the $CONF['encrypt'] =    to any other value in the postfix configuration?

I'm sorry, do you mean PostfixAdmin? if so, I don't know. sad

Well, my suggestion is:

1) Try CRYPT in SOGo first, without changing Dovecot config file.
2) If 1) doesn't work, try the one i described in previous post.