You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@syncope.apache.org by "Dalrymple, Philip" <pw...@mdtsoft.com> on 2019/09/05 12:52:40 UTC

Syncope How do I Generate the different adminPasswordAlgorithm

http://syncope.apache.org/docs/2.1/reference-guide.html#set-admin-credentials

Describes the process for creating a admin password in SHA1 but not in any of the
other algorithms.

The default is now set to 

adminPasswordAlgorithm=SSHA256

but when I do 
echo -n password | sha256sum
5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8

Which is nothing like 
DE088591C00CC98B36F5ADAAF7DA2B004CF7F2FE7BBB45B766B6409876E2F3DB13C7905C6AA59464

In fact the length is different (68 vs 81 or so)

I would like to use a bcrypt for the admin password (and of course change it) but would first like to
figure out how to generate the SSHA256 this is being used right now. I know this has to be simple
and I am missing something but search for SSHA256 does not turn up anything except for SHA256.

thanks.
--
This email, and any files transmitted with it, are confidential
and intended solely for the use of the individual or entity to
whom they are addressed.  If you have received this email in error,
please advise postmaster@mdtsoft.com <ma...@mdtsoft.com>.

3480 Preston Ridge Road
Suite 450
Alpharetta, GA 30005

Philip W. Dalrymple III <pw...@mdtsoft.com>
MDT Software - Automation Management Company
+1 678 297 1001
Fax +1 678 297 1003

Re: Syncope How do I Generate the different adminPasswordAlgorithm

Posted by "Dalrymple, Philip" <pw...@mdtsoft.com>.
Yea I knew that it was not a simple sha256, Now I see it is seeded.

Can the admin password handle the hash id preamble, i.e. the
$1$ or $2a$.


--
This email, and any files transmitted with it, are confidential
and intended solely for the use of the individual or entity to
whom they are addressed.  If you have received this email in error,
please advise postmaster@mdtsoft.com <ma...@mdtsoft.com>.

3480 Preston Ridge Road
Suite 450
Alpharetta, GA 30005

Philip W. Dalrymple III <pw...@mdtsoft.com>
MDT Software - Automation Management Company
+1 678 297 1001
Fax +1 678 297 1003


________________________________________
From: Francesco Chicchiriccò <il...@apache.org>
Sent: Thursday, September 5, 2019 11:06
To: user@syncope.apache.org
Subject: Re: Syncope How do I Generate the different adminPasswordAlgorithm

Hi,
please do not confuse

SHA256

with

SSHA256

I am not aware of any shell utility for getting a SSHA256 value, as
sha256sum does for SHA256.

You can easily google how to do that in Java / Python / Perl / PHP / etc.

HTH
Regards.

On 05/09/19 14:52, Dalrymple, Philip wrote:
> http://syncope.apache.org/docs/2.1/reference-guide.html#set-admin-credentials
>
> Describes the process for creating a admin password in SHA1 but not in any of the
> other algorithms.
>
> The default is now set to
>
> adminPasswordAlgorithm=SSHA256
>
> but when I do
> echo -n password | sha256sum
> 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
>
> Which is nothing like
> DE088591C00CC98B36F5ADAAF7DA2B004CF7F2FE7BBB45B766B6409876E2F3DB13C7905C6AA59464
>
> In fact the length is different (68 vs 81 or so)
>
> I would like to use a bcrypt for the admin password (and of course change it) but would first like to
> figure out how to generate the SSHA256 this is being used right now. I know this has to be simple
> and I am missing something but search for SSHA256 does not turn up anything except for SHA256.
>
> thanks.

--
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/


Re: Syncope How do I Generate the different adminPasswordAlgorithm

Posted by Francesco Chicchiriccò <il...@apache.org>.
Hi,
please do not confuse

SHA256

with

SSHA256

I am not aware of any shell utility for getting a SSHA256 value, as
sha256sum does for SHA256.

You can easily google how to do that in Java / Python / Perl / PHP / etc.

HTH
Regards.

On 05/09/19 14:52, Dalrymple, Philip wrote:
> http://syncope.apache.org/docs/2.1/reference-guide.html#set-admin-credentials
>
> Describes the process for creating a admin password in SHA1 but not in any of the
> other algorithms.
>
> The default is now set to 
>
> adminPasswordAlgorithm=SSHA256
>
> but when I do 
> echo -n password | sha256sum
> 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
>
> Which is nothing like 
> DE088591C00CC98B36F5ADAAF7DA2B004CF7F2FE7BBB45B766B6409876E2F3DB13C7905C6AA59464
>
> In fact the length is different (68 vs 81 or so)
>
> I would like to use a bcrypt for the admin password (and of course change it) but would first like to
> figure out how to generate the SSHA256 this is being used right now. I know this has to be simple
> and I am missing something but search for SSHA256 does not turn up anything except for SHA256.
>
> thanks.

-- 
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/