<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta content="text/html;charset=UTF-8" http-equiv="Content-Type"></head><body ><div style='font-size:10pt;font-family:Verdana,Arial,Helvetica,sans-serif;'><p class="p1">Package: libsasl2-modules-sql</p> <p class="p1">Version: 2.1.25.dfsg1-6+deb7u1</p> <p class="p1">Severity: wishlist</p> <p class="p2"><span style="font-size: 10pt;"><br></span></p><p class="p2"><span style="font-size: 10pt;">Dear Maintainer,</span></p> <p class="p2"><span style="font-size: 10pt;">Encrypting the password in an sql database for sasl2 to use has been a long outstanding feature that needs to be fixed. There are currently a few methods of resolving the issue but they involve outdated patches as well as installing other packages as a work around to the </span><span style="font-size: 10pt;">solution. Fixing this issue could help resolve a major issue with sql databases and sasl2 and help promote cyrus as imap server.</span></p> <p class="p2"><span style="font-size: 10pt;">The issue in question is the lack of support for the password_format: crypt option. As online security is ever more important this day and age, storing plain text passwords in a database isn't an acceptable use case. This functionality has been included with other </span><span style="font-size: 10pt;">libsasl2-modules-* packages. I honestly haven't found an answer as to why this functionality hasn't been included. If there is a reason, I apologize for the bug report but would also like an explanation so that I may document it accordingly.</span></p> <p class="p2"><span style="font-size: 10pt;">Thank you for your time. I look forward to answering any more questions you may have about this issue and/or what the current fixes look like.</span></p><p class="p2"><span style="font-size: 10pt;">Best,</span></p><p class="p2"><span style="font-size: 10pt;">Alex</span></p><p class="p2"><span style="font-size: 10pt;"><br></span></p> <p class="p1">-- System Information:</p> <p class="p1">Debian Release: 7.2</p> <p class="p1"> APT prefers stable</p> <p class="p1"> APT policy: (500, 'stable')</p> <p class="p1">Architecture: amd64 (x86_64)</p> <p class="p2"><span style="font-size: 10pt;"><br></span></p><p class="p2"><span style="font-size: 10pt;">Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)</span></p> <p class="p1">Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)</p> <p class="p1">Shell: /bin/sh linked to /bin/dash</p> <p class="p2"><span style="font-size: 10pt;"><br></span></p><p class="p2"><span style="font-size: 10pt;">Versions of packages libsasl2-modules-sql depends on:</span></p> <p class="p1">ii libc6 2.13-38</p> <p class="p1">ii libmysqlclient18 5.5.31+dfsg-0+wheezy1</p> <p class="p1">ii libpq5 9.1.9-1</p> <p class="p1">ii libsasl2-modules 2.1.25.dfsg1-6+deb7u1</p> <p class="p1">ii libsqlite3-0 3.7.13-1+deb7u1</p> <p class="p2"><br></p> <p class="p1">libsasl2-modules-sql recommends no packages.</p> <p class="p2"><span style="font-size: 10pt;">libsasl2-modules-sql suggests no packages.</span></p> <p class="p2"><span style="font-size: 10pt;">-- no debconf information</span></p></div></body></html>