MySQL 4.0 with OTRS v2 on Windows 2003

What type of hash does OTRS v2 use when storing a password in MySQL? It looks like crypt, but I am unable to tell what the salt is. Essentially, my problem is that I want to interface with the 'pw' field in the system_user table using a PHP page I made. I am currently unable to do this because I do not know how to encrypt the plaintext given by a user in the PHP page, encrypt it, and compare it to the 'pw' field in the system_user table. Any help is greatly appriciated! _________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

Hi, Solaris User schrieb:
What type of hash does OTRS v2 use when storing a password in MySQL? It looks like crypt, but I am unable to tell what the salt is.
Essentially, my problem is that I want to interface with the 'pw' field in the system_user table using a PHP page I made. I am currently unable to do this because I do not know how to encrypt the plaintext given by a user in the PHP page, encrypt it, and compare it to the 'pw' field in the system_user table.
Any help is greatly appriciated!
I can't give you an answer to your particular question, but you run OTRS on Win2003. So, I assume you also run an ADS. I suggest to use ADS/LDAP-authentication instead of the proprietary accout-storage of OTRS within the MySQL-DB. => see 1.3-doc and mail archive for details. I hope this can help, Alex
_________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar � get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
_______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support oder Consulting für Ihr OTRS System? => http://www.otrs.de/

Again this should have been asked in a mySQL List, however: Why not do the Job with mySQL directly ? SELECT count(*) FROM system_user WHERE pass=password("yourplaintextpass"); Started your Server with --old-passwords ? No problem, just use "pass=old_password()" instead. hth FranzF Solaris User wrote:
What type of hash does OTRS v2 use when storing a password in MySQL? It looks like crypt, but I am unable to tell what the salt is.
Essentially, my problem is that I want to interface with the 'pw' field in the system_user table using a PHP page I made. I am currently unable to do this because I do not know how to encrypt the plaintext given by a user in the PHP page, encrypt it, and compare it to the 'pw' field in the system_user table.
Any help is greatly appriciated!
_________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar – get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
_______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support oder Consulting für Ihr OTRS System? => http://www.otrs.de/

The routine that does this encryption is in.... /opt/otrs/bin/CryptPassword.pl Solaris User said:
What type of hash does OTRS v2 use when storing a password in MySQL? It looks like crypt, but I am unable to tell what the salt is.
Essentially, my problem is that I want to interface with the 'pw' field in the system_user table using a PHP page I made. I am currently unable to do this because I do not know how to encrypt the plaintext given by a user in the PHP page, encrypt it, and compare it to the 'pw' field in the system_user table.
Any help is greatly appriciated!
_________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
_______________________________________________ OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs Support oder Consulting für Ihr OTRS System? => http://www.otrs.de/
participants (5)
-
Alexander Scholler
-
Franz Ferdinand Esberger
-
grahamsmith@gandalfsemporium.co.uk
-
Marco Geweke
-
Solaris User