[SOLVED] Importing old system passwords to OJS2.X

[mbria]

Hi all,

Finishing my old magazine importation, now it's user's accounts time.

I know about the user importation/exportation plugin and I found the dtd so this is not the issue... my concern is related with importing user without asking them to set their passwords again.

The old system don't encode the password in it's database so I can read them without problems, but although my config indicates sha1 to OJS, a simple sha1($oldpass); don't encrypt it as in ojs.

I noticed in this post, you use a salt: viewtopic.php?t=513&highlight=sha1

But I didn't find this salt in the table it's supossed to be...

Any suggestion? Is this possible or I'm asking too much?

Best regards and thanks you all for your unvaluable help,

Marc.

[asmecher]

Hi Marc,

When you hash the password, you can't use sha1('oldpassword') -- you need to include the username too. For example, for a user with username "myUsername" and password "myPassword", you should set the password to sha1('myUsernamemyPassword').

Regards,
Alec Smecher
Open Journal Systems Team

[mbria]

Perfect.

It's exactly as you said.

Thanks again, and again, and again...

Marc.

[mbria]

Dear asmecher et. al,

With your commentaries I was able to generate a sha1 password as it need to be included in the database (I compare an existing user/pass in OJS and my generated one and they are excactly the same), but I suspect that the user importation's plugin don't really import the password if this is crypted.

Does it need to be "clean" to let the importer do sha1 work or the only way to include old passwords is overwriting it field directly at the database?

Thanks again for your help,

m.

[asmecher]

Hi Marc,

There's a known issue in OJS 2.1.1 with SHA1 hashing in the user import plugin; it's been corrected in CVS. You should be able to back-port the fix to your installation by downloading the most recent versions of the following files:

• http://research2.csci.educ.ubc.ca/cgi-bin/cvsweb/ojs2/plugins/importexport/users/UserExportDom.inc.php
• http://research2.csci.educ.ubc.ca/cgi-bin/cvsweb/ojs2/plugins/importexport/users/UserImportExportPlugin.inc.php
• http://research2.csci.educ.ubc.ca/cgi-bin/cvsweb/ojs2/plugins/importexport/users/UserXMLParser.inc.php
• http://research2.csci.educ.ubc.ca/cgi-bin/cvsweb/ojs2/plugins/importexport/users/importUsersConfirm.tpl

Regards,
Alec Smecher
Open Journal Systems Team

[mbria]

Don't you sleep?

Thanks a lot for everything. I can't imagine porting my magazine to OJS without your help.

Best regards,

m.