Hi,

I have the following setup running for a couple of years:

- OpenBSD -current (I have updated to the latest build last night), always run -current on my machines

- OpenSMTPd responsive for a few domains and evan less users, nothing special in the config - I'm using an sqlite3 database for credentials

```
from /etc/mail/smtpd.conf
table credentials sqlite:/etc/mail/sqlite.conf
listen on all port submission tls-require pki hodor.bsdbg.net auth <credentials> filter rspamd

/etc/mail/sqlite.conf
dbpath /var/www/etc/mail/mail.sqlite
query_credentials SELECT email, password FROM credentials WHERE email=?;
```

The `mail.sqlite` is in /var/www because of the chroot so that roundcubemail can use it, and the users can change their passwords with
roundcube plugin `password`.

- Dovecot is also configured to use that database.
- Roundcubemail as a webmail client.

The problem - I recently found that the Roundcube password plugin starts using $2y$ for blowfish-crypt, which plays well with dovecot but not with opensmtpd. Now, if a user changes its password, it won't be able to send emails because smtpd can't check the password. Maybe it doesn't know about $2y$?

If I update the database and replace the $2y$ with $2b$, everything will return to normal.

So, any thoughts or help on this will be appreciated.
Let me know if you need more details from my end.

Reply via email to