postfix and encryption

rhlnewbie · 10-04-2011, 12:02 AM

ok postfix and encryption is very confusing . to setup postfix to handle virtual domains and users the articles I reviewed uses mysql as the backend to store the virtual user email address and their passwords. in one article http://flurdy.com/docs/postfix/edition3.html encryption was not used to store the information in the mysql database. but in another article like this one http://library.linode.com/email/post...tu-9.10-karmic encryption is used.
So is encryption optional and how does postfix know if the data is plaintext or encrypted?
thank you
Miles

phil.d.g · 10-05-2011, 02:08 AM

I've not looked at the guides in detail, but it doesn't look the data is encrypted in either guide.

Only the password is hashed/encrypted in one guide but not the other, however. Postfix doesn't need to care how the password is stored in the db as it delegates authentication to saslauthd.

It looks like this configuration:

Code:

auth    required   pam_mysql.so user=mail_admin passwd=mail_admin_password host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1
account sufficient pam_mysql.so user=mail_admin passwd=mail_admin_password host=127.0.0.1 db=mail table=users usercolumn=email passwdcolumn=password crypt=1

Is the part that informs saslauthd to expect the passwords to be hashed rather than plaintext.

lithos · 10-05-2011, 02:16 AM

Hi,

try set-up iRedMail for the email/web server. It handles users and virtual domains with MySQL backend database stored

rhlnewbie · 10-06-2011, 12:04 AM

thanks for the advice. I already had come across it earlier. I should've mentioned it. sorry. but after installing iredmail. I examined the database with phpmyadmin and the password was encrypted, how I 'm still working on that from an example script that came with it. it seems they are using openssl(passwd -1, new_password) to encrypt it, but I don't get the same result I tried md5 base64 and none worked. so you seee how confused I am. maybe I 'm just not smart enough for this kind of thing,
Tanx,
Miles