search

nextcloud / user_sql

🔒 App for authenticating Nextcloud users using SQL
GNU Affero General Public License v3.0
66 stars 33 forks source link

Adding hash compatibility for Woltlab Suite #45

Closed thedespo closed 6 years ago

thedespo commented 6 years ago

Hello, it is possible to implement the hash algorithm from Woltlab? Unfortunately it is currently not possible to authenticate the users from the Woltlab database with any hash option which is already implemented to this plugin.

Info: The Woltlab dev´s says that he are using DoubleSalted bcrypt. Here is a link which i became from the woltlab dev´s: https://github.com/WoltLab/WCF/blob/master/wcfsetup/install/files/lib/util/PasswordUtil.class.php

If you need any more information, please don't hesitate to write me.

It would be very great if you can implement this.

regards Patrick

mlojewski-me commented 6 years ago

I see it supports several implementations. Some of them are already implemented. Which one do you have in your mind? wcf2 is double salted.

        'ipb2',     // Invision Power Board 2.x
        'ipb3',     // Invision Power Board 3.x
        'mybb1',    // MyBB 1.x
        'phpbb3',   // phpBB 3.x
        'phpass',   // phpass Portable Hashes
        'smf1',     // Simple Machines Forum 1.x
        'smf2',     // Simple Machines Forum 2.x
        'vb3',      // vBulletin 3.x
        'vb4',      // vBulletin 4.x
        'vb5',      // vBulletin 5.x
        'wbb2',     // WoltLab Burning Board 2.x
        'wcf1',     // WoltLab Community Framework 1.x
        'wcf2',     // WoltLab Suite 3.x / WoltLab Community Framework 2.x
        'xf1',      // XenForo 1.0 / 1.1
        'xf12',     // XenForo 1.2+
        'joomla1',  // Joomla 1.x
        'joomla2',  // Joomla 2.x
        'joomla3',  // Joomla 3.x
        'phpfox3',  // phpFox 3.x
        'cryptMD5',
thedespo commented 6 years ago

Hi, i am using WoltLab Suite 3.x. So the hash for wcf2 (double salted).

mlojewski-me commented 6 years ago

Can You see how wcf2 hashes word "password"? It would be greate if you get this value from database exactly how it is stored. I need it for unit test.

thedespo commented 6 years ago

Sure, if i am at home today evening i will do this by using my Account.

thedespo commented 6 years ago

So, here is the hash for the word "password" which is stored in the WoltLab Database.

Hash: $2a$08$XEQDKNU/Vbootwxv5Gp7gujxFX/RUFsZLvQPYM435Dd3/p17fto02

mlojewski-me commented 6 years ago

Done. The change is in develop branch.

thedespo commented 6 years ago

Awesome! It´s working. Thank you a lot!