phpgroupware-developers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-developers] mysql-pam-mcrypt


From: Debian Usera
Subject: [Phpgroupware-developers] mysql-pam-mcrypt
Date: 26 Feb 2002 01:47:39 -0600

I want to add a crypt option to the pam_mysql module so that it works
with your standard md5() mcrypted passwords there in phpgw_accounts. I
realize this is a hack, the effort should be in bringing pam to
phpgroupware alltogether, but im a little pressed on time...

Any ideas where to check this out??? Let me explain:

pam_mysql module has three encryption options to check against whatever
mysql database/table/field combination you want. You speciffy in the
parameters which database and table is it going to be and the user and
password fields. 

So its that close to working with phpgroupware out of the box. The firs
problem is that we use mcrypt md5, which is not compatible with mysql's
PASSWORD() nor with unix crypt() which is the only kind of encryption
supported by said pam module. This is good since phpgw needs to run on
windows and postgress....no discussion there.

My question is:
Am i in the right track???? Im looking into Raphael Bosseks debian
libmcrypt-dev (http://mcrypt.hellug.gr/lib) package as the c lib that,
supposedly (hell...i suppose so), would be compatible with php's
encryption system (it is the underlying stuff).
 
If that is the case i can make a module(nothing to it....just stealing
from what there is now in pam_mysql.c, it would be just like 10 lines at
the most) that say, takes the passphrase, database, table, user and
passwd field as your normal pam module parameters and provides
phpgw_style authentication to any app.

I dont need to say how cool does it actually end up being (not as much
as having pam in php though). All user/passwd stuff could end up being
administrated by phpgw. Including squid/squidguard users, pam based mail
agents, all pamish applications (samba anyone?)....

So....anyone doing anything like this (GPL/BSD, of course...)????

Alex 




reply via email to

[Prev in Thread] Current Thread [Next in Thread]