Page 1 of 1

Salted passwords?

PostPosted: Fri Apr 05, 2013 1:28 pm
by Pcace
Hey,

since several versions of Musiccabinet the Userpasswords are not stored in cleartext anymore. (Which is a very good thing).
But now i really need to recover one Password. Is there any chance to do this with the lines from the subsonic.script file?


Thanks,


Pcace

Re: Salted passwords?

PostPosted: Fri Apr 05, 2013 1:38 pm
by hakko
Nope, the password is not stored anymore, instead function(function(password)) is stored. So you'd have to run millions of passwords through function(function(...)) until you'd find a match of what you have in subsonic.script. It's security over convenience.

Re: Salted passwords?

PostPosted: Fri Apr 05, 2013 2:06 pm
by Pcace
Hmm ok,

good to know! Then i have to delete the user and create a new one...

Thanks!

Re: Salted passwords?

PostPosted: Fri Apr 05, 2013 4:35 pm
by daneren2005
Well if you have access to the db, you should be able to manually set the password to whatever they want it to be. Just take their password and run it through the salt + encryption and update it to be the result.