Yes, that looks like (part of) the (md5) encoded password as you will find also in the database.

Which means the token works, but is not useful.   I don’t think that is something easy to fix, if at all possible.

This also involves a security management.

gr,

Frans

From: Amanpreet Singh [mailto:goforaman@gmail.com]
Sent: woensdag 6 mei 2009 13:48
To: Frans Stekelenburg
Cc: otrs@otrs.org
Subject: passing the wrong password in auto response

hi,

i am using otrs 2.2 on debian system,
i have set the parameter

Login: <OTRS_CUSTOMER_DATA_UserLogin>
Password: <OTRS_CUSTOMER_DATA_UserPassword>

in the auto response, it is passing the UserLogin right, but not UserPassword.
means passing the wrong password as,

Password: goKW7Vf/VqbmM  (as the right password is go123456)

i think it is in encoding form or a garbage value.

plz help
thanks.



--:Aman