Re: Secure Password Distribution for Exchange Migration

[Rich Graves <rgraves () CARLETON EDU>]

You don't say how Cyrus is checking passwords, but you mention Netware. If you are using Universal Password, then lots 
of tools are available to extract the cleartext password from NDS. One is 
http://ldapwiki.willeke.com/wiki/DumpEdirectoryPasswordInformationTool

If your Cyrus installation is using using neither Kerberos nor NetWare, then you can intercept passwords at PAM layer 
if applicable, or worst case with minor changes to Cyrus source code.
-- 
Rich Graves http://claimid.com/rcgraves
Carleton.edu Sr UNIX and Security Admin
CMC135: 507-222-7079 Cell: 952-292-6529