pulsar_crypt(1)

NAME
pulsar_crypt - Utility to create DES or MD5 salted password hashes and plain MD5 hashes

SYNOPSIS
pulsar_crypt [ -c <password> [ -d | -m | <salt>]]

pulsar_crypt [ -h <to_md5_hash> ]

DESCRIPTION
This utility works in two modes. In the first crypt mode it creates DES or MD5 salted password hashes. These hashes are compatible with system /etc/passwd hashes and can be used in pulsar authentication files (auth_db = file:/path/to/passwd/file).

The second, hash mode is for creating plain MD5 hashes useable for testing APOP authentication. Salted MD5 will only work if your libc crypt() function supports it. Plain MD5 is provided by the GNU MD5 library and is not tied to system crypt library.

-c

    selects crypt mode. Requires a password string parameter.

-h

    selects hash mode. Requires a to_md5_hash string parameter.

CRYPT DESCRIPTION

-c password

    this is a plaintext (unencoded) password.

-d

    Password will be encoded by a DES hash using a random salt.

-m

    Password will be encoded by a MD5 hash using a random salt.

salt

    if you specify salt it will override the -d and -m switches and this salt will be used when creating MD5 or DES hashes. MD5 or DES hash is selected depending on salt format. Specify 2 salt characters from ./a..zA..Z0..9 if you want a DES hash. Specify $1$ + 8 salt characters from ./a..zA..Z0..9 for MD5. Don't forget to quote the MD5 salt or shell will process the $ characters. By default a random salted MD5 hash is created.

HASH DESCRIPTION

-h to_md5_hash

    this is a string to MD5 hash without any salt. Usable for testing APOP login functionality.

APOP login test

To test APOP login, telnet to your pop3 server. On login APOP challange is displayed, similar to:

    +OK <5763.1062847986@pop3.host>

Now take the string without +OK and spaces. Append your password to the end of string and call pulsar_crypt with -h parameter. Don't forget to shell escape the braces.

    pulsar_crypt -h "<5763.1062847986@pop3.host>passcode"
    String: "<5763.1062847986@pop3.host>passcode"
    Hash  : "29a33cfa1655f5b9547746bbdea07d0"

Take the supplied MD5 hash and issue the APOP <username> <md5hash> command.

    APOP username 29a33cfa1655f5b9547746bbdea07d0
    +OK

The athenticatin should be succesfull.

SEE ALSO
pulsar(8), pulsar.conf(5), pulsar_deliver(8), rfc1939.