Support SCRAM with odbc auth about ejabberd

[badlop]

This feature request is being tracked here: https://support.process-one.net/browse/EJAB-1598

[peterromfeldhk]

check this out http://petersys.blogspot.com/2013/09/ubuntu1204-ejabberd-with-mysql-backend.html
let me know if still need help

[rraptorr]

@peterromfeldhk Reporter of this issue specifically asked about SCRAM support for ODBC auth module. ODBC auth module currently does not support SCRAM at all, so your instructions are useless as SCRAM will still not work.

[dotdoom]

In that instruction a module is installed from https://github.com/peterromfeldhk/ejabberd which seems to add SCRAM support to odbc.

[peterromfeldhk]

sorry, thought its helpful since its "no plain passwords in mysql"
I am still new to ejabberd so i dont know exactly what scram is

sorry again

On Wed, Sep 25, 2013 at 10:50 PM, Janusz Dziemidowicz <
[email protected]> wrote:

@peterromfeldhk https://github.com/peterromfeldhk Reported of this
issue specifically asked about SCRAM support for ODBC auth module. ODBC
auth module currently does not support SCRAM at all, so your instructions
are useless as SCRAM will still not work.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/98#issuecomment-25092307
.

[gsomgsomgsom]

@peterromfeldhk I would like to use version approved by ejabberd mainstream. But thank you anyway.
@badlop, I will wait for it tracking there.

[rraptorr]

It does not. It only makes ODBC auth module store passwords hashed using SHA-256 (in a way that is much less secure than in SCRAM). There is nothing related to SCRAM-SHA-1 support (by which I understand https://tools.ietf.org/html/rfc5802 which is mandated by updated XMPP spec), so no, it will still not support SCRAM.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.