Fedora 23
I built an email server with postfix+dovecot+postgresql.
When it comes to retrieve the user password, I have this error from dovecot:
Unknown scheme BLF-CRYPT
In fact, my passwords are encrypted this way in my DB. After some readings, it seems not all Linux distro have glibc built with blowfish support.
the command $ doveadmin pw -l
does not return in fact BLF-CRYPT in its enabled scheme.
I installed the bcrypt package, but nothing changes.
Is there a solution, or am I missing something?
Thank you for help
On Fri, Apr 1, 2016 at 3:07 PM, arnaud gaboury arnaud.gaboury@gmail.com wrote:
Fedora 23
I built an email server with postfix+dovecot+postgresql.
When it comes to retrieve the user password, I have this error from dovecot:
Unknown scheme BLF-CRYPT
In fact, my passwords are encrypted this way in my DB. After some readings, it seems not all Linux distro have glibc built with blowfish support.
the command $ doveadmin pw -l
does not return in fact BLF-CRYPT in its enabled scheme.
I installed the bcrypt package, but nothing changes.
Is there a solution, or am I missing something?
Thank you for help
I was thinking of installing via rpm the opensuse rpm package with a different location, then build dovecot using this glibc. But the opensuse package is marked as not relocatable.
Am I correct to say I can't install it in a specific directory ?
--
google.com/+arnaudgabourygabx https://plus.google.com/_/notifications/emlink?emr=05814804238976922326&emid=CKiv-v6PvboCFcfoQgod6msAAA&path=%2F116159236040461325607%2Fop%2Fu&dt=1383086841306&ub=50
On Fri, 1 Apr 2016 18:24:35 +0200 arnaud gaboury arnaud.gaboury@gmail.com wrote:
I was thinking of installing via rpm the opensuse rpm package with a different location, then build dovecot using this glibc. But the
If it is the same glibc as Fedora uses, which is likely, this won't help, as the crypt still won't have blowfish support.
opensuse package is marked as not relocatable.
Am I correct to say I can't install it in a specific directory ?
I think this means relocatable in memory. It's been compiled to be loaded at a specific memory address, so the loader has to place it there. I'm not sure if the kernel accommodates this automatically or not. I think it does. So you could install it in a different directory, if you could get rpm to do so. But the install directory is usually part of the binary rpm. i.e. if you run rpm -i [suse glibc rpm], it will probably install it in the /usr heirarchy.
On Fri, Apr 1, 2016 at 7:10 PM, stan stanl-fedorauser@vfemail.net wrote:
On Fri, 1 Apr 2016 18:24:35 +0200 arnaud gaboury arnaud.gaboury@gmail.com wrote:
I was thinking of installing via rpm the opensuse rpm package with a different location, then build dovecot using this glibc. But the
If it is the same glibc as Fedora uses, which is likely, this won't help, as the crypt still won't have blowfish support.
opensuse package is marked as not relocatable.
Am I correct to say I can't install it in a specific directory ?
I think this means relocatable in memory. It's been compiled to be loaded at a specific memory address, so the loader has to place it there. I'm not sure if the kernel accommodates this automatically or not. I think it does. So you could install it in a different directory, if you could get rpm to do so.
No, I can't. # rpm --prefix /opt/ glibc-2.19-19.1.aarch64.rpm rpm: --prefix may only be used when installing new packages
This package is not relocatable and thus can't be installed elsewhere.
I uncompressed it with rpm2cpio and see if i can build dovecot with this glibc.
But the install directory is
usually part of the binary rpm. i.e. if you run rpm -i [suse glibc rpm], it will probably install it in the /usr heirarchy.
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
On Fri, 1 Apr 2016 15:07:34 +0200 arnaud gaboury arnaud.gaboury@gmail.com wrote:
Fedora 23
I built an email server with postfix+dovecot+postgresql.
When it comes to retrieve the user password, I have this error from dovecot:
Unknown scheme BLF-CRYPT
In fact, my passwords are encrypted this way in my DB. After some readings, it seems not all Linux distro have glibc built with blowfish support.
the command $ doveadmin pw -l
does not return in fact BLF-CRYPT in its enabled scheme.
I installed the bcrypt package, but nothing changes.
Is there a solution, or am I missing something?
I used to compile the glibc package to get a later glibc. When I looked at the source code, there was nothing related to blowfish. There is a crypt directory, and a crypt.c, but md5 and sha256 and sha512 seemed to be the only supported schemes.
I looked at the file /usr/share/doc/dovecot/wiki/Authentication.PasswordSchemes.txt and it says that dovecot uses glibc crypt as its decoder.
So, I think the answer to your question is that there is no solution, as far as making glibc crypt speak blowfish. You might be able to hack dovecot to use bcrypt to decrypt the password instead of throwing the error. That would mean compiling the src.rpm with a patch.
-
arnaud gaboury -
stan