Results 1 to 3 of 3

Thread: zmprov checking encrypted passwords?

  1. #1
    useopenid is offline Senior Member
    Join Date
    Jul 2008
    Location
    Corvallis, OR
    Posts
    54
    Rep Power
    7

    Default zmprov checking encrypted passwords?

    I'm moving some mail accounts from another type of mail server into zimbra; the old server uses standard "{ssha}" hashed passwords, which zimbra imports with:

    zmprov ca user@domain '{ssha}alskdjflkjaalsdkfjlkjasdflkjasdlfjalskdfjaj '

    Three of the accounts fail with this error however:
    ERROR: account.INVALID_PASSWORD (invalid password: not enough numeric characters)

    I'm not sure what's going on here --- I don't believe zmprov is really cracking them in a split second unless it's doing a short dictionary attack and they're really simple passwords.

    I just realized all three of the affected accounts have pw hashes that don't have numbers in them: it looks like the validity check is treating them as plaintext even though they're not...

  2. #2
    tiger2000 is offline Elite Member
    Join Date
    May 2008
    Location
    Taiwan
    Posts
    296
    Rep Power
    7

    Default

    It seems that "zmprov ca" doesn't accept encrypted string as passwd, but
    "zmprov ma" does.

    so, have you tried to :

    zmprov ca account@domain 111111
    (111111 is tmp passwd)

    and then use "ma" to set passwd :

    zmprov ma account@domain userPassword '{crypt}xxxxxxxx'

    not sure if this helps.

  3. #3
    useopenid is offline Senior Member
    Join Date
    Jul 2008
    Location
    Corvallis, OR
    Posts
    54
    Rep Power
    7

    Default

    Yes, in fact that's what I discovered last night and that approach in fact worked...

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] 5.0.11 -> 5.0.12 Upgrade failed (SSLeay.so)
    By bards1888 in forum Installation
    Replies: 30
    Last Post: 04-26-2010, 07:56 AM
  2. [SOLVED] install zcs 6 beta1 / centos 5.3 - LDAP FAIL
    By powrrrplay in forum Installation
    Replies: 7
    Last Post: 04-24-2009, 09:15 AM
  3. Moving to different server
    By AaronW1000 in forum Installation
    Replies: 2
    Last Post: 07-03-2008, 07:39 AM
  4. Replies: 0
    Last Post: 08-30-2007, 10:06 AM
  5. Replies: 13
    Last Post: 05-15-2007, 06:41 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •