Postfixadmin passwords need {PLAIN-MD5}

audiodef

How do I get Postfixadmin to insert {PLAIN-MD5} at the beginning of each hashed password string? My mail server needs this or passwords won't be recognized.
_________________
decibel Linux: https://decibellinux.org
Github: https://github.com/Gentoo-Music-and-Audio-Technology
Facebook: https://www.facebook.com/decibellinux
Discord: https://discord.gg/73XV24dNPN

Hu · Administrator Joined: 06 Mar 2007 Posts: 23062

MD5 for password storage is long since deprecated, especially if it is not even salted. Wouldn't it be better to store the hashes using an algorithm that satisfies current best practices?

audiodef · Posted: Thu Jun 20, 2019 2:04 am Post subject:

Yes, and I plan to get to that when I have time to sit down and really go over my whole mail system. I guess I can just handle it manually until then.
_________________
decibel Linux: https://decibellinux.org
Github: https://github.com/Gentoo-Music-and-Audio-Technology
Facebook: https://www.facebook.com/decibellinux
Discord: https://discord.gg/73XV24dNPN

szatox · Advocate Joined: 27 Aug 2013 Posts: 3487

I guess you're not going to get much help with the original question anyway, so here's a little tip for the future improvement:
I've found delegating authentication to dovecot pretty convenient. Postfix still needs access to the database so it can read aliases, but with authentication delegated to dovecot, postfix does not limit your options to md5 anymore.

audiodef · Posted: Mon Jun 24, 2019 6:33 pm Post subject:

Nice tip, thanks, szatox.

_________________
decibel Linux: https://decibellinux.org
Github: https://github.com/Gentoo-Music-and-Audio-Technology
Facebook: https://www.facebook.com/decibellinux
Discord: https://discord.gg/73XV24dNPN