Bug#731955: libsasl2-modules-sql: Support password_format: crypt for sql

alex alex at alexkavon.com
Wed Dec 11 15:34:00 UTC 2013


Package: libsasl2-modules-sql
 Version: 2.1.25.dfsg1-6+deb7u1
 Severity: wishlist
 

Dear Maintainer,
 Encrypting the password in an sql database for sasl2 to use has been a long outstanding feature that needs to be fixed. There are currently a few methods of resolving the issue but they involve outdated patches as well as installing other packages as a work around to the solution. Fixing this issue could help resolve a major issue with sql databases and sasl2 and help promote cyrus as imap server.
 The issue in question is the lack of support for the password_format: crypt option. As online security is ever more important this day and age, storing plain text passwords in a database isn't an acceptable use case. This functionality has been included with other libsasl2-modules-* packages. I honestly haven't found an answer as to why this functionality hasn't been included. If there is a reason, I apologize for the bug report but would also like an explanation so that I may document it accordingly.
 Thank you for your time. I look forward to answering any more questions you may have about this issue and/or what the current fixes look like.
Best,
Alex


 -- System Information:
 Debian Release: 7.2
   APT prefers stable
   APT policy: (500, 'stable')
 Architecture: amd64 (x86_64)
 

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
 Shell: /bin/sh linked to /bin/dash
 

Versions of packages libsasl2-modules-sql depends on:
 ii  libc6             2.13-38
 ii  libmysqlclient18  5.5.31+dfsg-0+wheezy1
 ii  libpq5            9.1.9-1
 ii  libsasl2-modules  2.1.25.dfsg1-6+deb7u1
 ii  libsqlite3-0      3.7.13-1+deb7u1
 

 libsasl2-modules-sql recommends no packages.
 libsasl2-modules-sql suggests no packages.
 -- no debconf information

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20131211/0bbe0413/attachment.html>


More information about the Pkg-cyrus-sasl2-debian-devel mailing list