Ansgar B. wrote:

In concrete situation I have old passwords stored as md5 hashes in DB and want to migrate to rsaauth and salted passwords.

Are there any hook where I can
1. fetch the password
2. build a md5 hash
3. check it againt old password
4. build new password
5. write it to the database

The "saltedpasswords" extension should normally do exactly what you described. You do not even have to move a finger.

You can't automate the process of migration to saltedpasswords, as you do not know the cleartext passwords just by knowing the md5 hashes of the passwords.

The saltedpasswords extension will compare submitted passwords during login sessions, and fallback to md5 if the stored password is not a salted one. When the password is correct it will automagically update the password in the database with a salted version created from the cleartext password submitted (probably transmitted rsa encrypted).


greets,
Bernhard
_______________________________________________
TYPO3-english mailing list
TYPO3-english@lists.typo3.org
http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english

Reply via email to