OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Migration from unix accounts to mysql db.

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sun Apr 08 2007 - 17:09:15 CDT


On Sunday 08 April 2007 23:28, Sebastian Sala wrote:

> I want to migrate from unix user accounts to mysql but i have a little
> problem and i do not know how to solve it.
> The problem is in password migration. I don't have any idea how to
> collect them in plain text so i can place them in mysql db.
> I think i should sniff the network traffic for couple of days and catch
> passwords for pop3 logins. Maybe there are some tools which can do that.
> Or maybe there is another way.

Cyrus-SASL can do that.

pwcheck_method: auxprop saslauthd
mech_list: plain login
auxprop_plugin: sql
sql_engine: mysql
sql_hostnames: ....
sql_user: ...
sql_passwd: ...
sql_database: ...
sql_select: SELECT pw FROM users WHERE....
sql_insert: INSERT INTO users (user, realm, pw) VALUES ('%u', '%r', '%v')
sql_update: UPDATE users SET ....
auto_transition: yes

This will create/update a SQL-Entry after each successfull Userlogon. After
you have the Entries for all Users, remove auto_transition, saslauthd and
add "digest-md5 cram-md5" to the mech_list Option.

--
        Andreas