Password storage method

[chetannagaonkar]

Hello,

I am working on external authentication for users. Can someone let me know what encryption method is used to store passwords in users table pls? Is it MD5 or Sha1?

Thanks.
Best Regards
Chetan

[jojo]

for external Authentication like htpasswd, LDAP, SSL Client Certificates you don't need the passwords of the user table

[chetannagaonkar]

Thanks for the quick reply, Jojo. I am using it for external reports developed. I would like the users who have Stats permissions to access the repors. I tried using md5 and SHA1 methods. None of them work.

[chetannagaonkar]

Hasn't anyone come across this? Can someone let me know at least what method is used or if it is not possible to decrypt the agents passwords pls?

Chetan

[jojo]

You can not decrypt the passwords with "nomal" methods as they are stored as salted md5. You can switch to store them as plaintext, but this will be a security issue.

[chetannagaonkar]

Thanks jojo. So, if I use salted md5 method to decrypt, would that suffice?

Chetan

[jojo]

you can not decrypt md5

[chetannagaonkar]

Thanks, jojo. In that case, is there a way to authenticate agent and if he has access to Stats group?