#1  
Old 16th July 2013, 13:45
suther suther is offline
Junior Member
 
Join Date: May 2013
Posts: 24
Thanks: 2
Thanked 4 Times in 4 Posts
Default Migration-Tool from ispcp

I write a migration-toolkit from ispcp (and all forks of it).

Maybe later, additional isp-Panels will follow (like plesk, cpanel and other)

I hope to get here some input for my question, that will cause of creationprocess.

First question:

In ispcp i have only md5 Passwords for useraccounts. Can i use those directly to insert them into ispconfig, or via api, or does these passwors salted in ispconfig?
Reply With Quote
Sponsored Links
  #2  
Old 16th July 2013, 14:02
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,041
Thanks: 826
Thanked 5,384 Times in 4,231 Posts
Default

Quote:
In ispcp i have only md5 Passwords for useraccounts. Can i use those directly to insert them into ispconfig, or via api, or does these passwors salted in ispconfig?
ISPConfig uses crypt-md5 with salt for all types of users (mail, ftp, ssh, interface login). by default, so you can not insert md5 passwords. Only the ispconfig interface users (in sys_user + client table) have a fallback mode that works with plain md5 as well.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 16th July 2013, 18:55
suther suther is offline
Junior Member
 
Join Date: May 2013
Posts: 24
Thanks: 2
Thanked 4 Times in 4 Posts
Default

Ok, so question is: Is there another Function, which make my md5-Passwords salted?

Plan is to migrate the ISPCP-Panel-Login-passwords as ISPConfig Login-Passwords.

Would be glad to got some recommendations
Reply With Quote
  #4  
Old 16th July 2013, 20:34
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,041
Thanks: 826
Thanked 5,384 Times in 4,231 Posts
Default

I'am not aware of a conversion method, but this does not mean that there is none.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 4th September 2013, 21:08
Disassembler Disassembler is offline
Junior Member
 
Join Date: Jul 2012
Posts: 19
Thanks: 2
Thanked 7 Times in 5 Posts
Default

By the very nature of cryptographic hashes there can't be a way to salt passwords if you don't have the plaintext. With Plesk I was lucky that it's daft enough to store plaintext in the database but I suppose you have no other choice than to reset the passwords.
Unless you want to exploit the fact that MD5 is broken (something to consider for ISPconfig as well!) and you have some CPU power to spare for reversing the hashes Of course you could use one of the various rainbow table sites to automatically check if you can crack the hashes ...
Reply With Quote
  #6  
Old 1st November 2013, 14:32
ispcomm ispcomm is offline
Senior Member
 
Join Date: Aug 2010
Posts: 166
Thanks: 19
Thanked 11 Times in 11 Posts
 
Default

ispcp passwords in the database are actually obfuscated cleartext. This is true for ftp and mail passwords.

You can decrypt them all.

Read in the source for the corresponding function, and look for the "keys" in both the perl and php engines.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ispcp migration ispcomm Developers' Forum 7 7th December 2011 00:25
Migration from HP UNIX to RHEL - tool replacement vijayaKumars HOWTO-Related Questions 0 12th November 2009 12:19
I Fail at installing ispconfig where did I go wrong? stocker741 Installation/Configuration 14 30th October 2008 14:12
Customer info lookup tool catdude Developers' Forum 2 2nd January 2008 16:59
DirectAdmin to ISPConfig migration tool? sevar General 2 29th July 2006 18:40


All times are GMT +2. The time now is 10:34.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.