starred/modoboa-modoboa
1
0
Fork 0
mirror of https://github.com/modoboa/modoboa.git synced 2026-04-27 09:55:58 +03:00
Code Issues 60 Projects Releases 10 Packages Wiki Activity

[GH-ISSUE #1564] [MD5-CRYPT] imported password do not work. #1231

New issue
Closed
opened 2026-02-27 11:16:00 +03:00 by kerem · 13 comments
kerem commented 2026-02-27 11:16:00 +03:00
Owner
Copy link

Originally created by @stefaweb on GitHub (Sep 3, 2018).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/1564

Impacted versions

  • Modoboa: 1.10.6
  • installer used: Yes
  • Webserver: Nginx

Steps to reproduce

Imported accounts with [MD5-CRYPT] don't work. The account is well created but login failed.

/var/log/mail.log:

Sep 3 18:51:37 modoboa dovecot: auth-worker(25093): Error: sql(man@domain.tld,xx.xx.xx.xx,<ptTDWvp0eJ0+0qZC>): Invalid password in passdb: Not a valid MD5-CRYPT or PLAIN-MD5 password

From imported cvs:

account;man@domain.tldr;[MD5-CRYPT]c3af58603be288769bb31d980bb74abc;;;True;SimpleUsers;man@domain.tld;102

Am I wrong somewhere?

Originally created by @stefaweb on GitHub (Sep 3, 2018). Original GitHub issue: https://github.com/modoboa/modoboa/issues/1564 # Impacted versions * Modoboa: 1.10.6 * installer used: Yes * Webserver: Nginx # Steps to reproduce Imported accounts with [MD5-CRYPT] don't work. The account is well created but login failed. /var/log/mail.log: `Sep 3 18:51:37 modoboa dovecot: auth-worker(25093): Error: sql(man@domain.tld,xx.xx.xx.xx,<ptTDWvp0eJ0+0qZC>): Invalid password in passdb: Not a valid MD5-CRYPT or PLAIN-MD5 password` From imported cvs: `account;man@domain.tldr;[MD5-CRYPT]c3af58603be288769bb31d980bb74abc;;;True;SimpleUsers;man@domain.tld;102 ` Am I wrong somewhere?
kerem closed this issue 2026-02-27 11:16:00 +03:00
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 3, 2018):

Found. Can't work when we use [] instead of {}

I close.

<!-- gh-comment-id:418179094 --> @stefaweb commented on GitHub (Sep 3, 2018): Found. Can't work when we use `[]` instead of `{}` I close.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

Hello!

I reopen this issue.

I corrected my export code to use brackets instead of quote but the problem is still here.

account;man@domain.tldr;{MD5-CRYPT}c3af58603be288769bb31d980bb74abc;;;True;SimpleUsers;man@domain.tld;102

The password was generated with the php md5() command.

<!-- gh-comment-id:418257385 --> @stefaweb commented on GitHub (Sep 4, 2018): Hello! I reopen this issue. I corrected my export code to use brackets instead of quote but the problem is still here. `account;man@domain.tldr;{MD5-CRYPT}c3af58603be288769bb31d980bb74abc;;;True;SimpleUsers;man@domain.tld;102` The password was generated with the php md5() command.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@tonioo commented on GitHub (Sep 4, 2018):

The format was indeed wrong. And you still have an issue since you selected the wrong scheme. If passwords were generated using the md5 php function then you should select MD5. FYI, this is a weak encryption mechanism and you should move to MD5-CRYPT which is far more secure.

<!-- gh-comment-id:418261962 --> @tonioo commented on GitHub (Sep 4, 2018): The format was indeed wrong. And you still have an issue since you selected the wrong scheme. If passwords were generated using the md5 php function then you should select MD5. FYI, this is a weak encryption mechanism and you should move to MD5-CRYPT which is far more secure.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

Sorry but I don't understand, do you mean {MD5} ?

<!-- gh-comment-id:418264370 --> @stefaweb commented on GitHub (Sep 4, 2018): Sorry but I don't understand, do you mean `{MD5}` ?
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@tonioo commented on GitHub (Sep 4, 2018):

Yes.

<!-- gh-comment-id:418267291 --> @tonioo commented on GitHub (Sep 4, 2018): Yes.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

I tried, still doesn't work.

<!-- gh-comment-id:418267805 --> @stefaweb commented on GitHub (Sep 4, 2018): I tried, still doesn't work.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@tonioo commented on GitHub (Sep 4, 2018):

And make sure the "Crypt passwords" checkbox is not checked.

<!-- gh-comment-id:418268231 --> @tonioo commented on GitHub (Sep 4, 2018): And make sure the "Crypt passwords" checkbox is not checked.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

"Crypt passwords" is not checked in import page.

<!-- gh-comment-id:418269186 --> @stefaweb commented on GitHub (Sep 4, 2018): "Crypt passwords" is not checked in import page.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@tonioo commented on GitHub (Sep 4, 2018):

I remember MD5 passwords must be base64 encoded (dovecot requirement). Is it the case?

<!-- gh-comment-id:418273951 --> @tonioo commented on GitHub (Sep 4, 2018): I remember MD5 passwords must be base64 encoded (dovecot requirement). Is it the case?
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

No, basic md5() without salt or base64 encoding.

<!-- gh-comment-id:418275718 --> @stefaweb commented on GitHub (Sep 4, 2018): No, basic md5() without salt or base64 encoding.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

I'll try later to base64 encode the md5 password. I'll let you know.

<!-- gh-comment-id:418277713 --> @stefaweb commented on GitHub (Sep 4, 2018): I'll try later to base64 encode the md5 password. I'll let you know.
kerem commented 2026-02-27 11:16:01 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

I encoded the md5 password with base64. Still do not work.

<!-- gh-comment-id:418284395 --> @stefaweb commented on GitHub (Sep 4, 2018): I encoded the md5 password with base64. Still do not work.
kerem commented 2026-02-27 11:16:02 +03:00
Author
Owner
Copy link

@stefaweb commented on GitHub (Sep 4, 2018):

Found.

I made an error when trying the connexion. I navigator autocomplete was not entering the right password.

It work with {MD5} and regular MD5 scheme. No need to base64 encode (does't work).

I close this time. Thanks.

ps: vacation api for modoboa. Any new?

<!-- gh-comment-id:418286744 --> @stefaweb commented on GitHub (Sep 4, 2018): Found. I made an error when trying the connexion. I navigator autocomplete was not entering the right password. It work with {MD5} and regular MD5 scheme. No need to base64 encode (does't work). I close this time. Thanks. ps: vacation api for modoboa. Any new?
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
fix/sievefilters-allow-email-in-rule-name
dependabot/npm_and_yarn/frontend/axios-1.15.0
translations_04c0b653215cb5fa48ab101eae1a1917_ja_JP
translations_5d93982e9fd6dab991db4faf93ce9ded_ja_JP
fix/login-issue-3995
fix/sievefilters-issues
add-vitepress-openapi
2974-dmarc-empty-email
2.3.x
updated-doc-2.3.0
feature/OIDC
delete-all-alarms
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_af_ZA
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_ar
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_ca
1.x
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_sk
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_tr
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_es_ES
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_uk
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_zh_CN
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_de_DE
translations_modoboa-admin-locale-en-lc-messages-djangojs-po--master_da_DK
1.8.x
1.7.x
1.6.x
1.4.x
1.3.x
1.2.x
2.8.2
2.8.1
2.8.0
2.7.2
2.7.1
2.7.0
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.1
2.5.0
2.4.11
2.4.10
2.4.9
2.4.8
2.4.7
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.3.0-beta.4
2.3.0-beta.3
2.3.0-beta.2
2.3.0-beta.1
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.2
2.1.1
2.1.0
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
2.0.0-beta.3
2.0.0-beta.2
2.0.0-beta.1
1.17.0
1.16.1
1.16.0
1.15.0
1.14.0
1.13.1
1.13.0
1.12.2
1.12.1
1.12.0
1.11.1
1.11.0
1.10.7
1.10.6
1.10.5
1.10.4
1.10.3
1.10.2
1.10.1
1.10.0
1.9.1
1.9.0
1.8.3
1.8.2
1.8.1
1.8.0
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.3
1.6.2
1.6.1
1.6.0
1.5.3
1.5.2
1.5.1
1.5.0
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.5
1.3.4
1.2.2
1.3.3
1.3.2
1.3.1
1.3.0
1.2.1
1.2.0
1.2.0-rc2
1.2.0-rc1
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.1
1.0.0
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9
0.8.8
0.8.7
0.8.6.1
0.8.6
0.8.5
0.8.4
0.8.3
0.8.3-rc1
0.8.2
0.8.1
0.8
0.8-rc2
0.8-rc1
0.7.2
0.7.1
0.7
0.6.1
0.6
0.5
0.3
0.2
0.1
Labels
Clear labels   
bug

   
bug

   
dependencies

   
design

   
documentation

   
duplicate

   
enhancement

   
enhancement

   
enhancement

   
feedback-needed

   
help-needed

   
help-needed

   
installer

   
invalid

   
looking-for-sponsors

   
modoboa-contacts

   
new-ui

   
new-ui

   
pr

   
pull-request

Mirrored from GitHub Pull Request

  
pyconfr

   
python

   
question

   
security

   
stale

   
webmail

   
wontfix
No labels
bug
bug
dependencies
design
documentation
duplicate
enhancement
enhancement
enhancement
feedback-needed
help-needed
help-needed
installer
invalid
looking-for-sponsors
modoboa-contacts
new-ui
new-ui
pr
pull-request
pyconfr
python
question
security
stale
webmail
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/modoboa-modoboa#1231
No description provided.