Project

General

Profile

How is pass hashed?

Added by AndzinSan Dono over 11 years ago

Hi, I am working on project and need to know how is redmine hashing the user pass. I want to create new user for redmine everytime when user is registered in my site with same registration info. How can I do that?


Replies (1)

RE: How is pass hashed? - Added by Attila Bujáki over 11 years ago

Hi!

Currently it is hashed using salt.

Hash_row = SHA1( salt + SHA1( password ) )

So you compute SHA1 for your password, then concatanate it with salt, stored in the salt row,
then calculate SHA1 again for the whole concatanated string.

The original issue can be found here:
http://www.redmine.org/issues/7410

I hope that helped.

I think you should implement this user creating issue using Redmine REST API, this way you can stay
stay database independent. You can find a good description of the API on the site.

    (1-1/1)