Re: Password encryption

On 09.10.2008, at 09:55, Andrew Higgs wrote:
> I am trying to automate the bulk adding of users. I am currently  
> doing an insert into "person" and a matching insert into "staff".

Be careful with that. Its a good idea to check the SQL generated by  
OGo if you use the admin UI to create a user (-PGDebugEnabled YES).

> All seems to be working except for password. How are these encrypted?


Just regular Unix crypt():

http://svn.opengroupware.org/OpenGroupware.org/trunk/Logic/LSBase/LSCryptCommand.m

> I can either setup users with a blank password or put in a pre- 
> encrypted password. If I do copy a password from another user to use  
> as a default, then the newly inserted user can't change their  
> password. They can login but the password change fails.

Thats weird. Maybe somehow related to the crypt() salt.

Helge
-- 
Helge Hess
http://helgehess.eu/
-- 
OpenGroupware.org Users
[email protected]
http://mail.opengroupware.org/mailman/listinfo/users