From: Ladar Levison (ladarnerdshack.com)
Date: Thu Sep 02 2004 - 16:42:14 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Has anyone gotten a system into production that uses a MySQL database
for SMTP authentication? How did you achieve such an implementation? My
plan right now is to drop something into SASL that takes the AUTH
request, runs SHA512 on it, and looks for the result in my DB.

Second question, are there any secure password authentication mechanisms
that don't require you to store a plain text copy of the password on
your server? I can't seem to find any in common use (ie CRAM or DIGEST).

Reasoning? What's the point of storing the password using SHA512 if your
SASL DB stores the password in plain text right there on the server...

L~

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]