Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working on a setup where postfix and cyrus-imap do proxy authorization against openldap (my setup is here!cD ). I love this solution, it's a lot more elegant that using saslauthd. But I'm concerned about passwords stored in cleartext, as required by DIGEST-MD5.

I know of the many ways to protect the data stored in openldap (file system encryption, etc...), but if somebody gets a root access, passwords will be disclosed, and I want to prevent that.

My question is: Is there a way to use hashed passwords with sasl and proxy authorization ?

share|improve this question
Not all directory server require clear-text for DIGEST MD5. Perhaps you should choose a different directory server product. – Terry Gardner Sep 19 '11 at 18:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.