Mail module: auth cram-md5 does not work

Miguel Beccari miguel.beccari at clikka.com
Fri Feb 6 01:41:57 MSK 2009


Il giorno 05/feb/09, alle ore 23:14, Petite Abeille ha scritto:

>
> On Feb 5, 2009, at 10:55 PM, Miguel Beccari wrote:
>
>> AUTH CRAM-MD5
>> 334 PDc1Njk0NDk5MS4xMjMzODcwNTE3QG15c3FsPg==
>> bXlfdGVzdEBjbGlra2EuY29tIDdjNzRkYjUxYTNhZGZjMTZhNjVhNDdhY2ExMzZkNTE4
>> 535 5.7.0 Invalid login or password
>>
>> This is my HTTP auth log
>>
>> HTTP_AUTH_USER = my_test_user
>> HTTP_AUTH_PASS = 7c74db51a3adfc16a65a47aca136d518
>>
>>
>> NOTE: password should be "test" and not  
>> "7c74db51a3adfc16a65a47aca136d518"
>>
>> Am I wrong?
>
> With CRAM-MD5 [1], no password is sent in the clear, but rather a  
> HMAC-MD5 of the server challenge.

I had suspects in that way....

Can you point me to a way to verify auth, please?

I have username and chanllenge (7c74db51a3adfc16a65a47aca136d518).  
Could I go back to password?







More information about the nginx mailing list