md5-hashed password in mod_auth_sql

[Daniel Kaupp]

Hi,

i customized mod_auth_sql to fetch user credentials from an external database.
The passwords there are md5 hashes. unfortunately i can't get a connection (not authorized)  and i'm sure that the sql statement is right.

is there a way to determine if the password matches?
how can i tell prosody to use md5?

Thanks,
Daniel

[Daniel Kaupp]

Update:

I tried to connect with the hash of the password, and this worked.
so, how can i tell prosody that the stored passwords are already md5?

Documentation says:
If it has the plaintext password in the database, it can compare this directly with the password it received from the client. If it has a hashed password stored, it hashes the password from the client and compares the hashes.

but i already use "sql" for authentication method, so i can't say "PLAIN" here.

Perhaps someone can clarify things.

Thanks, Daniel

[Vadim A. Misbakh-Soloviov]

Hi!

> to fetch user credentials
> passwords ... are md5 hashes

> sql statement is right.
>
> is there a way to determine if the password matches?
> how can i tell prosody to use md5?

If you're fetching credentials -> you can run SQL queries.
So, why don't you want to use SQL server's MD5 function?
AFAIR, any of MySQL and PgSQL (and, probably SQLite3 too) supports MD5.

--
Best regsrds,
mva

[Vadim A. Misbakh-Soloviov]

[although, anyway, util.hashes.md5 ]

--
Best regsrds,
mva