Running postfix+dovecot+mysql on a mac-mini, and trying to solve this puzzle. Is this a Mac issue?, a MySQL issue? or something I haven't configured in? You can see from the output of the samples shows in the first case, that SHA512-CRYPT seems to be Unknown. The code I used is from a Linux based tutorial on setting up Postfix+Dovecot+MySQL on a site. Everything is generally going ok, apart from this bit. There are some others unknown as well. The codes used to create my database of passwords follows these output examples. MacMini:~ robert$ sudo doveadm pw -s SHA512-CRYPT -p 123456 Fatal: Unknown scheme: SHA512-CRYPT MacMini:~ robert$ sudo doveadm pw -s SHA512 -p 123456 {SHA512}ujJTh2rta8ItSm/1PYQGxq2GQZXtFEq1yHYhtsIztUi66uaVbfNG7IwX9eoQ817jy8UUeX7X3dMUVGTioLq0Ew= MacMini:~ robert$ sudo doveadm pw -s SHA256 -p 123456 {SHA256}jZae727K08KaOmKSgOaGzww/XVqGr/PKEgIMkjrcbJI MacMini:~ robert$ sudo doveadm pw -s MD5 -p 123456 {MD5}$1$.mAQzPhO$6v/WxTUt.Y1lhopkMarEb0 MacMini:~ robert$ sudo doveadm pw -s MD5-CRYPT -p 123456 {MD5-CRYPT}$1$gNkYwx/o$3nQLmUIPOBmZdR/e/EXFV1 MacMini:~ robert$ sudo doveadm pw -s BLF-CRYPT -p 123456 Fatal: Unknown scheme: BLF-CRYPT MacMini:~ robert$ sudo doveadm pw -s SHA512 -p 1pass66U! {SHA512}EuuO6BAt+bgzXIOw7XIdiVBFwdEZ2tGqHOJ/DSTSkD+ikw7GQQo+KtHSta7p3KNv2AEVKtfOuyl5UeCEqnKogg= MacMini:~ robert$ sudo doveadm pw -s SHA256-CRYPT -p 1pass66U! Fatal: Unknown scheme: SHA256-CRYPT MacMini:~ robert$ mysql --version mysql Ver 14.14 Distrib 5.6.19, for osx10.9 (x86_64) using EditLine wrapper MacMini:~ robert$ cd My MySQL Version: mysql Ver 14.14 Distrib 5.6.19, for osx10.9 (x86_64) using EditLine wrapper The MySQL code used to create the user/password table. Which seems to work fine, and creates the table as it should - even though the resulting password doesn't appear to be quite right for SHA512-CRYPT INSERT INTO `mailserver`.`virtual_users` (`id`, `domain_id`, `password` , `email`) VALUES ('1', '1', ENCRYPT('firstpassword', CONCAT('$6$', SUBSTRING(SHA(RAND()), -16))), 'email1 at example.com'), ('2', '1', ENCRYPT('secondpassword', CONCAT('$6$', SUBSTRING(SHA(RAND()), -16))), 'email2 at example.com'); What it actually creates is this: This is not a SHA512-CRYPT password?? mysql> SELECT * FROM mailserver.virtual_users; 3 | 1 | $6jxK9DWPBrAc | robert at zeus.example.com Just to be clear,. this is the section of the Dovecot configs that deals with handling this. BUT.. On the MAC-Mini, SHA512-CrYPT is unknown. # List of supported schemes is in # http://wiki2.dovecot.org/Authentication/PasswordSchemes # default_pass_scheme = SHA512-CRYPT So the question is, what Encryption should I be using, and is this an Apple thing, or a MySQL thing?
Edgar Pettijohn III
2015-May-01 23:28 UTC
Fatal: Unknown scheme: SHA512-CRYPT. On a Mac-mini
On May 1, 2015, at 6:28 AM, Robert Chalmers wrote:> Running postfix+dovecot+mysql on a mac-mini, and trying to solve this > puzzle. Is this a Mac issue?, a MySQL issue? or something I haven't > configured in? > > You can see from the output of the samples shows in the first case, that > SHA512-CRYPT seems to be Unknown. > The code I used is from a Linux based tutorial on setting up > Postfix+Dovecot+MySQL on a site. Everything is generally going ok, apart > from this bit. There are some others unknown as well. The codes used to > create my database of passwords follows these output examples. > > > > MacMini:~ robert$ sudo doveadm pw -s SHA512-CRYPT -p 123456 > Fatal: Unknown scheme: SHA512-CRYPT > MacMini:~ robert$ sudo doveadm pw -s SHA512 -p 123456 > > {SHA512}ujJTh2rta8ItSm/1PYQGxq2GQZXtFEq1yHYhtsIztUi66uaVbfNG7IwX9eoQ817jy8UUeX7X3dMUVGTioLq0Ew=> MacMini:~ robert$ sudo doveadm pw -s SHA256 -p 123456 > {SHA256}jZae727K08KaOmKSgOaGzww/XVqGr/PKEgIMkjrcbJI> MacMini:~ robert$ sudo doveadm pw -s MD5 -p 123456 > {MD5}$1$.mAQzPhO$6v/WxTUt.Y1lhopkMarEb0 > MacMini:~ robert$ sudo doveadm pw -s MD5-CRYPT -p 123456 > {MD5-CRYPT}$1$gNkYwx/o$3nQLmUIPOBmZdR/e/EXFV1 > MacMini:~ robert$ sudo doveadm pw -s BLF-CRYPT -p 123456 > Fatal: Unknown scheme: BLF-CRYPT > MacMini:~ robert$ sudo doveadm pw -s SHA512 -p 1pass66U! > > {SHA512}EuuO6BAt+bgzXIOw7XIdiVBFwdEZ2tGqHOJ/DSTSkD+ikw7GQQo+KtHSta7p3KNv2AEVKtfOuyl5UeCEqnKogg=> MacMini:~ robert$ sudo doveadm pw -s SHA256-CRYPT -p 1pass66U! > Fatal: Unknown scheme: SHA256-CRYPT > MacMini:~ robert$ mysql --version > mysql Ver 14.14 Distrib 5.6.19, for osx10.9 (x86_64) using EditLine > wrapper > MacMini:~ robert$ cd > >Above you show {SHA512}"lots of stuff" then the error is Unknown scheme: SHA256-CRYPT I would say something is wrong with the passwd lookup. Probably with your data in mysql. Perhaps this link will help http://dev.mysql.com/doc/mysql-security-excerpt/5.6/en/sha256-authentication-plugin.html> > My MySQL Version: > > mysql Ver 14.14 Distrib 5.6.19, for osx10.9 (x86_64) using EditLine > wrapper > > The MySQL code used to create the user/password table. Which seems to work > fine, and creates the table as it should - even though the resulting > password doesn't appear to be quite right for SHA512-CRYPT > > INSERT INTO `mailserver`.`virtual_users` > (`id`, `domain_id`, `password` , `email`) > VALUES > ('1', '1', ENCRYPT('firstpassword', CONCAT('$6$', > SUBSTRING(SHA(RAND()), -16))), 'email1 at example.com'), > ('2', '1', ENCRYPT('secondpassword', CONCAT('$6$', > SUBSTRING(SHA(RAND()), -16))), 'email2 at example.com'); > > > What it actually creates is this: This is not a SHA512-CRYPT password?? > > mysql> SELECT * FROM mailserver.virtual_users; > > 3 | 1 | $6jxK9DWPBrAc | robert at zeus.example.com > > > Just to be clear,. this is the section of the Dovecot configs that deals > with handling this. BUT.. On the MAC-Mini, SHA512-CrYPT is unknown. > > # List of supported schemes is in > # http://wiki2.dovecot.org/Authentication/PasswordSchemes > # > default_pass_scheme = SHA512-CRYPT > > > So the question is, what Encryption should I be using, and is this an Apple > thing, or a MySQL thing?