Re: Decrypting a user password

This WebDNA talk-list message is from

2000


It keeps the original formatting.
numero = 27875
interpreted = N
texte = Paul -That's a feature; you're not _supposed_ to be able to decrypt the user's password. It's for security purposes; you can change it using the administrative interface, but you can never decrypt it. In most O/S's, the user password is encypted using a 1-way hash; you literally never know the plaintext value of the password. In the Netware requester for example, the password is encypted at the client and the hash only is passed to the server for comparison to the existing hash.If you need to know the user's passwords for some reason, you will have to encypt them yourself using a known seed, then store the value somewhere else. See the Classified Ads example for how to do this, for example if you need to be able to e-mail the user their password.HTHJohn Peacock ____________________Reply Separator____________________ Subject: Decrypting a user password Author: (WebCatalog Talk) Date: 2/21/00 1:14 PMIn the webcatalog users database, when a user is added no seed value is specified to encrypt the users password. How can I do a lookup in the users.db to get the user's password and display it decrypted?I used the [decrypt] tag around the results of the lookup, but that yeilded nothing.Thanks, Paul ------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to .This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Associated Messages, from the most recent to the oldest:

    
  1. Re[2]: Decrypting a user password (jpeacock@univpress.com 2000)
  2. Re: Decrypting a user password (jpeacock@univpress.com 2000)
Paul -That's a feature; you're not _supposed_ to be able to decrypt the user's password. It's for security purposes; you can change it using the administrative interface, but you can never decrypt it. In most O/S's, the user password is encypted using a 1-way hash; you literally never know the plaintext value of the password. In the Netware requester for example, the password is encypted at the client and the hash only is passed to the server for comparison to the existing hash.If you need to know the user's passwords for some reason, you will have to encypt them yourself using a known seed, then store the value somewhere else. See the Classified Ads example for how to do this, for example if you need to be able to e-mail the user their password.HTHJohn Peacock ____________________Reply Separator____________________ Subject: Decrypting a user password Author: (WebCatalog Talk) Date: 2/21/00 1:14 PMIn the webcatalog users database, when a user is added no seed value is specified to encrypt the users password. How can I do a lookup in the users.db to get the user's password and display it decrypted?I used the [decrypt] tag around the results of the lookup, but that yeilded nothing.Thanks, Paul ------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to .This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to jpeacock@univpress.com

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Setting up shop (1997) Help name our technology! (1997) Thanks for tips, more quest (1997) Code validation (was: problem using...) (2004) [OT] ImageMagick error (2004) WebCat2 several catalogs? (1997) [WebDNA] advice on quoting a job (2009) RE: Missing contexts on NT (1997) Problems with [Search] param - Mac Plugin b15 (1997) creating an email message (1998) TRAINING videos - Prove IT. (1998) Payments -> Bank Accounts (2005) NT Version on IIS 4.0 (1997) WC2f3 (1997) [cart]'s ever get recycled? (2000) MOOOOOO (2000) How to show via drop down menu? (2000) PCS Frames (1997) Test (2003) Search returns all, not 20 (1997)