cmd5checkpw is a checkpassword
compatible authentication program that uses CRAM-MD5 authentiaction mode.
It was designed primary to work with qmail
but it can be used by any other program that knows how to use checkpassword
compatible authentication. Actualy you can save yourself a lot of work using
this program instead of patching other programs. Changing a program to use checkpassword
is certainly simplier than adding whole CRAM-MD5 support.
This code is based on the original checkpassword by Dan Bernstein.
It uses MD5 and HMAC algorithms as described in rfc1321 and rfc2104.
09.10.2000 - bugfix (there was a
way to crash cmd5checkpw and get the possibility to send out mail without valid
account) and implementation of PLAIN/LOGIN support.
02.02.2000 - major site update. Now it contains also some information.
01.02.2000 - bugfix release 0.21. grab it. It finally works.
You can download the latest version from this page. Notification about new version will be posted by me on Freshmeat too. History of the changes can be found here.
Click on a filename below to download the distribution:
Required software:
- a c compiler (gcc f.e.)
- gnu make
Installation:
Unpack the archive and change to the newly created directory.
1. Compile the program.
% make
2. Install the programs and man page:
# make install
Now you should have an example poppasswd
copied to your /etc directory and cmd5checkpw binary in your /bin directory.
Now select a free user id in your system.
Create that user in /etc/passwd do "chown
thatuser /etc/poppasswd" , "chmod
400 /etc/poppasswd", "chown thatuser
/bin/cmd5checkpw" and "chmod
a+s /bin/cmd5checkpw".
Of course replace "thatuser" with username of the user you have created.
Usage:
My qmail-smtpd-auth patch will make qmail use it for authentication. Other programs can use it too. Detailed working of the command is explained in the included man page.
You can contact me for anything concerning cmd5checkpw at brush@elysium.pl . I'm realy asking you guys to send all the enhancements you make so they can be used by all others.
The development on this package will continue. I will add as much funcionality as i need personaly so it'll grow with me. I will also incorporate good stuff if i get any from you. If you need something but you don't know how to code it then let me know. If time permits me, i'll implement it eventualy.
Please read my TODO
list to know what features are in the works.
This project was possible because i've got paid to do it. The company that made it possible is Polska OnLine . They are leading polish ISP. If you need professional service, choose them.
We (Elysium deeZine) are experts in professional site design (don't mind this page ;) ) and if you need a good site design, multimedia presentation or some paper work then visit our page and contact us.
This software (as the original checkpassword) is in public domain except for the crypto routines that contain different copyright inside the source code. Do what you want with it.