How are passwords Encrypted?

[karlie]

Hi,

Was wondering if anyone can shed some light on how OTRS encrypts passwords stored in the database?

And is there a simple way to change this?

Thanks

[crythias]

http://source.otrs.org/viewvc.cgi/otrs/ ... iew=markup (start at around line 72)

$Self->{ConfigObject}->Get('AuthModule::DB::CryptType') (md5, sha1, sha2, plain?) (Default? md5...?)
http://source.otrs.org/viewvc.cgi/otrs/ ... iew=markup

Code: Select all

342	    # This is the auth. module againt the otrs db
343	    $Self->{AuthModule} = 'Kernel::System::Auth::DB';
344	
345	    # password crypt type (sha2|sha1|md5|crypt|plain)
346	#    $Self->{'AuthModule::DB::CryptType'} = 'md5';

since this isn't actually *assigned* here, it's likely to also be in the SysConfig:
Customer::AuthModule::DB::CryptType

Default value: MD5-Crypt
If "DB" was selected for Customer::AuthModule, the crypt type of passwords must be specified. I don't know why we can't change the admin authmodule the same way, but if you put the uncommented line in Config.pm, ...

[karlie]

Thanks for that... its helped no end with my integration.

[crythias]

If you have specific questions that might help someone reply with something that can help you, please post.