Re: Password encryption

Hi Helge,

On Thu, Oct 9, 2008 at 12:53 PM, Helge Hess <[email protected]>wrote:

> On 09.10.2008, at 09:55, Andrew Higgs wrote:
>
>> I am trying to automate the bulk adding of users. I am currently doing an
>> insert into "person" and a matching insert into "staff".
>>
>
> Be careful with that. Its a good idea to check the SQL generated by OGo if
> you use the admin UI to create a user (-PGDebugEnabled YES).


I will be. Thanks for the tip. Could be very useful in other situations too.
:-)

All seems to be working except for password. How are these encrypted?
>>
>
>
> Just regular Unix crypt():
>
>
> http://svn.opengroupware.org/OpenGroupware.org/trunk/Logic/LSBase/LSCryptCommand.m



That's the way I understood it, but could not match the encrypted string
using php. I guess this is a salt issue.

I can either setup users with a blank password or put in a pre-encrypted
>> password. If I do copy a password from another user to use as a default,
>> then the newly inserted user can't change their password. They can login but
>> the password change fails.
>>
>
> Thats weird. Maybe somehow related to the crypt() salt.


Yes, I guess so.

Thanks.

Regards