← Back to team overview

dhis2-devs team mailing list archive

Re: USERS-Password

 

This has been discussed several times on this list including most recently
here, so check the archives as well.

https://lists.launchpad.net/dhis2-devs/msg28635.html


Regards,
Jason




On Wed, Apr 23, 2014 at 7:40 PM, Dan Cocos <dan@xxxxxxxxxxxx> wrote:

> Hi Riddy,
>
> The password uses the username as a salt for the password so even if two
> users have the same password the encrypted password will not be the same
> org.hisp.dhis.security.spring.SpringSecurityPasswordManager is the class
> that contains the algorithm.
>
> I don’t think that users can be created via the Web API yet, some correct
> me if that isn’t true.
>
> I suggest you use the dhis-adhoc tool to create users, there isn’t much
> documentation on it that I know of, but there is a working example here
> If you look at the changes here
> https://code.launchpad.net/~dhis2-devs-core/dhis2/pii-encrypt (note the
> encryption here isn’t related to password encryption so look at it as more
> of a template)
>
> You’ll likely have to update the first section of the pom.xml to reflect
> what version of DHIS 2 you are using.
> <parent>
>     <groupId>org.hisp.dhis</groupId>
>     <artifactId>dhis-services</artifactId>
>     <version>2.15-SNAPSHOT</version>
>   </parent>
>
>
>
> *Dan Cocos*
> BAO Systems
> www.baosystems.com
> T: +1 202-352-2671 | skype: dancocos
>
> On Apr 23, 2014, at 7:49 AM, riddy ndoma <riddyndoma@xxxxxxxxx> wrote:
>
> Hi all,
> I have 500 users that I try to create in the database. I prefer to ca
> directly in the backend. I created a Java class to tackle the PostgreSQL
> database. For the password I took the encrypted password district
> "48e8f1207baef1ef7fe478a57d19f2e5" but when I try to connect with the
> front-end, it does not work! What is the algorithm used to encrypt the
> password? Or who can give me a trick to bypass the password?
> --
> Riddy NDOMA
> Software Developer
> *Skype:* riddyndoma, *G+:* riddyndoma, *FB:* riddy ndoma
> *Twitter:* riddyndoma, *LinkedIn:* riddy ndoma
> *Blog:* http://riddyndoma.blogspot.com/
>
> Vous servir est mon désire (Serving you is my desire)
> _______________________________________________
> Mailing list: https://launchpad.net/~dhis2-devs
> Post to     : dhis2-devs@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-devs
> More help   : https://help.launchpad.net/ListHelp
>
>
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~dhis2-devs
> Post to     : dhis2-devs@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-devs
> More help   : https://help.launchpad.net/ListHelp
>
>

References