Homepage | Products | OX Knowledge Base | Support | Try Now | Contact | Company
OX Logo
Results 1 to 3 of 3
  1. #1
    jonny12 Guest

    Default Change passwordMech

    Hi,
    where can I influence which passwordMech is used? I set up a OX 6.0.5 via the repositories on a opensuse 10.3. Currently Passwords are stored as sha-hash. How can I change it to md5?

    Thx
    Regards
    Thomas

  2. #2
    Join Date
    Feb 2007
    Location
    Germany
    Posts
    3,695

    Default

    Hi Thomas,

    this mech can be changed at /opt/open-xchange/etc/admindaemon/User.properties
    Code:
    # specify the default password mechanism to use
    # possible values: CRYPT / SHA
    DEFAULT_PASSWORD_MECHANISM=SHA
    note that those changes only are effective for creating new user. Users already created with a sha'ed password will not be updated to a crypt() password.

    Greetings

  3. #3
    Join Date
    Jul 2007
    Location
    Bern - Switzerland
    Posts
    27

    Default

    Hmm,

    Martin as I understand jonny12 he wants to change sha to md5 hash.
    And you tell him where to do it, and to change sha to crypt.
    But crypt (8bit) is worse than sha (160bit) or md5 (128bit).

    So to conclude....

    yes, jonny you can change the passwordMech in the file
    /opt/open-xchange/etc/admindaemon/User.properties
    but only to sha and crypt with sha as default. And to my opinion sha is better than md5 so leave it.

    But because of reports of possible cracking sha hashes (mentioned in http://en.wikipedia.org/wiki/SHA_hash_functions):
    Martin, is the version sha-1 or sha-2 with 160bit or the recommended sha-256 or 512?


    CU
    Popeye

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •