View Single Post
  #4  
Old 11th January 2010, 19:02
spanish spanish is offline
Member
 
Join Date: Nov 2009
Posts: 56
Thanks: 12
Thanked 4 Times in 4 Posts
Default

Quote:
Originally Posted by spanish View Post
Please, what is the correct value for 'encryption' in ISPConfig 3 database? md5-hex? other?
I have located the answer to my question: http://www.howtoforge.com/forums/sho...72&postcount=4

This backend works for me (add into /etc/horde/passwd3/backends.php):

PHP Code:
$backends['sql'] = array (
    
'name' => 'MySQL Database of ISPConfig 3',
    
'preferred' => '',
    
'password policy' => array(
        
'minLength' => 8,
        
'maxLength' => 64,
        
'maxSpace' => 0,
        
'minUpper' => 1,
        
'minLower' => 1,
        
'minNumeric' => 1,
        
'minSymbols' => 1
    
),
    
'driver' => 'sql',
    
'params' => array(
        
'phptype'    => 'mysql',
        
'hostspec'   => '127.0.0.1',
        
'username'   => 'ispconfig',
        
'password'   => 'USERPASSWORD',
        
'encryption' => 'crypt-md5',
        
'database'   => 'dbispconfig',
        
'table'      => 'mail_user',
        
'user_col'   => 'email',
        
'pass_col'   => 'password',
        
'show_encryption' => false
    
)
); 
The new password is encrypted into dbispconfig, I can access into Squirrelmail, the user can change his password via Horde if he knows the old password, the admin can change the password of user without know the old password, etc.

Perfect!



OK, I think this option is secure if Horde, ISPConfig and its MySQL database are in the same server. Correct?

Thanks and cordial greetings,

Manuel
Reply With Quote