[TYPO3-english] User importation

Richard Davies richard at ocular.co.nz
Tue Sep 18 23:50:11 CEST 2012


Hi Paolo

The extension rsaauth isn't doing what you think its doing.
rsaauth encrypts passwords in transit to the server, not in the database.
Its like having ssl just for your users password. The database passwords
are still in plaintext.
Crypting the password in the database is done by saltedpasswords. If you
are using saltedpasswords, just add the users and passwords in plaintext,
then run the mass update in the scheduler for saltedpasswords. This will
change all the plaintext passwords in the database.

Reading the manuals of extensions is a good thing, it helps you understand
what is going on. A lot of the time the information you are looking for is
missing, but understanding what is going on is important.

Richard

On 19 September 2012 02:20, Paolo Chianese <pchianese at cross-systems.ch>wrote:

> Hello everybody,
>
> I have a problem while importing users.
> I have a file with all users and password (not crypted).
>
> I wouldlike to do a script to import all of them in my typo3 installation.
>
> I use rsa authentication to login my users so my question is :
>
> Can I get an hashed password when i'm not in an typo3 instance ?
> Where can I get the encryption key of my typo3 installation ?
>
> I'm on typo3 4.7.4.
> I use RSA authentication for typo3 (v4.7.4)
>
> Many thank's in advance
>
> Paolo Chianese
> ______________________________**_________________
> TYPO3-english mailing list
> TYPO3-english at lists.typo3.org
> http://lists.typo3.org/cgi-**bin/mailman/listinfo/typo3-**english<http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english>
>


More information about the TYPO3-english mailing list