[tpop3d-discuss] Re: [Exim] Some interesting problems I ran into today regarding Exim SMTP-Auth, tpop3d, and vmail-sql

[Philip Hazel]

On Fri, 11 Jan 2002, Chris Lightfoot wrote:

> I think that Daniel is referring to the action of the
> crypteq function. He is correct in stating that vmail-sql
> and tpop3d expect an MD5 password to be of the form
> {md5}<hex string>, whereas (I believe) exim/LDAP expect it
> to be of the form {md5}<base64 string>.

Yes, reading the code, that is true. I don't remember the exact details,
but I think somebody sent me the original patch, and I'm sure it was to
make Exim work with LDAP.

Given that an MD5 digest is always exactly 16 bytes long (32 hex
characters), maybe Exim should make a distinction by looking at the
length of the password it is given.


-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@cus.cam.ac.uk      Cambridge, England. Phone: +44 1223 334714.