users.pw encryption algorithm

[henzen]

Good day

This is a follow up question to viewtopic.php?f=53&t=33703&e=1

We need to update (remotely) the stored password in the users table and I'm trying to figure out (and reproduce so we can update the table directly) how the password is encrypted.

There is no Frontend::Agent::Auth, so I presume Frontend::Customer::Auth is being used:

Customer::AuthModule - DB
Customer::AuthModule::DB::CryptType - SHA-2

In an effort to try and trace things, I've tried to add some unconditional $Kernel::OM->Get('Kernel::System::Log')->Log() lines in:

System/Auth/DB.pm
System/CustomerAuth/DB.pm

but nothing get's logged (when I change an agent password in the frontend). Even after httpd restart.

Passwords in users.pw are 64 chars long, and appear to be lowercase hex (so possibly encoded, or using *_hex). Perl's Digest::SHA module does not provide SHA-2, so I'm a bit lost here.

I'd appreciate any pointers on figuring this out, so I can reproduce in our Perl code.

Thanks

[henzen]

Sorted, this happens in System::Auth::DB and uses SHA256