--On Monday, November 19, 2001 01:54:11 PM -0500 Ken Murchison 
<[EMAIL PROTECTED]> wrote:

> Cyrus users,
>
> We are getting close to releasing Cyrus v2.1 (yeah, I know I've said
> this a bunch of times already) and we are leaning towards making it
> dependent on SASL v2.  We would like to do this for a number of reasons:
>
> <reasons elided>

Sounds like a good idea.

> The biggest (only?) downside for existing installations is that any
> secrets stored in sasldb would have to migrated to the new format.  This
> will require resetting all of the users passwords because they can not
> be extracted from the old sasldb (unless you have been using my APOP
> patch).  As stated above, this will eventually have to be done, so why
> not now?

Aarrgghhh.  That's a definate stumbling block.  Especially if you have
other applications sharing the sasldb; but not ready to shift to v2.

How much can be done to ease the transition?  Is there a tool to
extract PLAIN passwords from the v1 sasldb and store them in the
new format?  (That would at least handle the common case where all
of the mechanisms actually used the same password for a given user.)



-Pat

Attachment: msg04547/pgp00000.pgp
Description: PGP signature

Reply via email to