Mail module: auth cram-md5 does not work
Miguel Beccari
miguel.beccari at clikka.com
Fri Feb 6 01:41:57 MSK 2009
Il giorno 05/feb/09, alle ore 23:14, Petite Abeille ha scritto:
>
> On Feb 5, 2009, at 10:55 PM, Miguel Beccari wrote:
>
>> AUTH CRAM-MD5
>> 334 PDc1Njk0NDk5MS4xMjMzODcwNTE3QG15c3FsPg==
>> bXlfdGVzdEBjbGlra2EuY29tIDdjNzRkYjUxYTNhZGZjMTZhNjVhNDdhY2ExMzZkNTE4
>> 535 5.7.0 Invalid login or password
>>
>> This is my HTTP auth log
>>
>> HTTP_AUTH_USER = my_test_user
>> HTTP_AUTH_PASS = 7c74db51a3adfc16a65a47aca136d518
>>
>>
>> NOTE: password should be "test" and not
>> "7c74db51a3adfc16a65a47aca136d518"
>>
>> Am I wrong?
>
> With CRAM-MD5 [1], no password is sent in the clear, but rather a
> HMAC-MD5 of the server challenge.
I had suspects in that way....
Can you point me to a way to verify auth, please?
I have username and chanllenge (7c74db51a3adfc16a65a47aca136d518).
Could I go back to password?
More information about the nginx
mailing list