[rt-users] database: user password encryption

[Mike.Frazer at ipay.com]

Essentially... create the MD5 hash of the password, then convert it to
Base64.  The Base64 part is necessary to store the password because MD5 can
sometimes create characters that can't be stored in the database as-is.
Base64 ensure that the password will be storable and compatible across other
systems.



-----Original Message-----
From: rt-users-bounces at lists.bestpractical.com
[mailto:rt-users-bounces at lists.bestpractical.com]On Behalf Of Sebastian
Flothow
Sent: Thursday, June 03, 2004 8:22 AM
To: jamie.baddeley at fx.net.nz
Cc: rt
Subject: Re: [rt-users] database: user password encryption


Am 3. Jun 2004 um 05:40 Uhr schrieb Jamie Baddeley:
> what format does rt store the passwords in?

 From perldoc /opt/rt3/lib/RT/User_Overlay.pm:

> _GeneratePassword PASSWORD
>
> returns an MD5 hash of the password passed in, in base64 encoding.

So I suppose that's stored in the DB.


Sebastian

-- 
Sebastian Flothow
sebastian at flothow.de

Because it reverses the logical flow of conversation.
 > Why is top posting frowned upon?

_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

RT Developer and Administrator training is coming to LA, DC and Frankfurt
this spring and summer.
http://bestpractical.com/services/training.html

Sign up early, as class space is limited.