Salted passwords?

[Pcace]

Hey,

since several versions of Musiccabinet the Userpasswords are not stored in cleartext anymore. (Which is a very good thing).
But now i really need to recover one Password. Is there any chance to do this with the lines from the subsonic.script file?


Thanks,


Pcace

[hakko]

Nope, the password is not stored anymore, instead function(function(password)) is stored. So you'd have to run millions of passwords through function(function(...)) until you'd find a match of what you have in subsonic.script. It's security over convenience.

[Pcace]

Hmm ok,

good to know! Then i have to delete the user and create a new one...

Thanks!

[daneren2005]

Well if you have access to the db, you should be able to manually set the password to whatever they want it to be. Just take their password and run it through the salt + encryption and update it to be the result.