Re: [exim] Exim4 + fixed_cram

Top Page
Delete this message
Reply to this message
Author: Evgeniy Berdnikov
Date:  
To: exim-users
Subject: Re: [exim] Exim4 + fixed_cram
On Tue, Jan 21, 2014 at 12:37:32PM +0100, basti wrote:
> I have installed Exim4 on my Debian Wheezy. All is running fine.
> Now I try to use "fixed_cram" authenticator for more security.

...
> fixed_login:
>         driver = plaintext
>         public_name = LOGIN
>         server_prompts = "Username:: : Password::"
> #    server_condition = ${lookup pgsql{AUTH_LOGIN_LOOKUP} {yes}{no}}
>     server_condition = ${lookup pgsql{AUTH_LOGIN_LOOKUP} {yes} \
>               {${if
> crypteq{$2}{${extract{1}{:}{${lookup{$1}lsearch{CONFDIR/passwd}{$value}{*:*}}}}}{yes}{no}}}}
>         server_set_id = $1

>
> fixed_cram:
>         driver = cram_md5
>         public_name = CRAM-MD5
>     server_condition = ${lookup pgsql{AUTH_LOGIN_LOOKUP} {yes} \
>                 {${if
> crypteq{$2}{${extract{1}{:}{${lookup{$1}lsearch{CONFDIR/passwd}{$value}{*:*}}}}}{yes}{no}}}}

>
>         server_set_id = $1


It looks like a blind copy of "server_condition" from LOGIN driver to
CRAM-MD5. In the /etc/exim4/conf.d/auth/30_exim4-config_examples file
from Exim4 package there are templates for CRAM-MD5, look at them,
they use the "server_secret" parameter.
--
Eugene Berdnikov