- 论坛徽章:
- 0
|
我有3个数据库,针对这3个数据库写了3条select语句,情况如下:
情况1:
Apr 22 03:25:25 sosogh authdaemond: SQL query: SELECT
username,password,"",10000,10000,"/vmail","","","" FROM mailbox where username =
[email=]'sosogh@sosogh.com'[/email]
Apr 22 03:25:25 sosogh authdaemond: password matches successfully
Apr 22 03:25:25 sosogh authdaemond: Authenticated: clearpasswd=123456, passwd=$1
$bFpAS6Fo$Yd6K1EOLo94eFaLFznUk31
情况2:
Apr 22 03:30:20 sosogh authdaemond: SQL query: SELECT CONCAT
(a.user_id,'@',c.domain_name),SUBSTR(a.password,7,32),"",10000,10000,"/vmail","","","" FROM cm_user_info a,td_user b,td_domain c where a.user_id="sosogh" AND c.domain_name="haha.com"
Apr 22 03:30:20 sosogh authdaemond: supplied password '123456' does not match encrypted password 'e10adc3949ba59abbe56e057f20f883e'
Mail:/etc/courier# mysql -uroot -pmysqlpassword -e 'select md5(123456)'
+----------------------------------+
| md5(123456) |
+----------------------------------+
| e10adc3949ba59abbe56e057f20f883e |
+----------------------------------+
情况3
May 20 16:04:23 Anti-spam authdaemond: SQL query: SELECT CONCAT
(id,'@',mbox_host),crypt,"",10000,10000,"/vmail","","","" FROM USERS where id="sosogh" AND mbox_host="net.net" AND now()<expire_date
May 20 16:04:23 Anti-spam authdaemond: password matches successfully
May 20 16:04:23 Anti-spam authdaemond: Authenticated: clearpasswd=123456,
passwd=3GpRtq21H0R1M
3种情况中,除了第二种情况密码匹配失败外,另外两种都匹配成功,密码都是123456
三种情况select返回的的加密后的password都不同分别是:
1.$1$bFpAS6Fo$Yd6K1EOLo94eFaLFznUk31
2.e10adc3949ba59abbe56e057f20f883e
3.3GpRtq21H0R1M
情况3,我不知道那个password是使用什么加密方式加密的,但是它匹配成功
情况2是使用md5加密的,为什么 authdaemond没有匹配密码成功?
谢谢! |
|