1 Topic by murat.ugur

  • murat.ugur
  • Member
  • Offline
  • Registered: 2011-01-21
  • Posts: 26

Topic: How to change SSHA512 to SHA512 hash ?

Hello, i would like to migrate Openfire, but there is a hash problem. I can auth. users with SHA512 hash. But I cannot SSHA512. There is no support SSHA512 on Openfire. Is there any solution ? or How can i change SSHA512 to SHA512 hashes on iredmail.

I changed  (DEFAULT_PASSWORD_SCHEME = 'SHA512') settings.py file. However i can see plain password on mysql table.

Thanks for any helps.

Best.



==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.5-1
- Linux/BSD distribution name and version: Debian
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Mysql
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
====

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,788

Re: How to change SSHA512 to SHA512 hash ?

SHA512 is not supported in iRedAdmin. Did you try SSHA instead?

3 Reply by murat.ugur

  • murat.ugur
  • Member
  • Offline
  • Registered: 2011-01-21
  • Posts: 26

Re: How to change SSHA512 to SHA512 hash ?

ZhangHuangbin wrote:

SHA512 is not supported in iRedAdmin. Did you try SSHA instead?

nope. I will try it.

Thank you.

4 Reply by murat.ugur

  • murat.ugur
  • Member
  • Offline
  • Registered: 2011-01-21
  • Posts: 26

Re: How to change SSHA512 to SHA512 hash ?

ZhangHuangbin wrote:

SHA512 is not supported in iRedAdmin. Did you try SSHA instead?

It doesnt support ssha smile

Supported hashes below.

bcrypt
The password is stored as a bcrypt hash.
md5
The password is stored as a hex-encoded MD5 hash.
plain
The password is stored as plain text.
sha1
The password is stored as a hex-encoded SHA-1 hash.
sha256
The password is stored as a hex-encoded SHA-256 hash.
sha512
The password is stored as a hex-encoded SHA-512 hash.

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,788

Re: How to change SSHA512 to SHA512 hash ?

Seems you have to use MD5 instead. In iRedAdmin-Pro, please set the password scheme name to 'PLAIN-MD5' (all upper cases) and restart apache or uwsgi service.

Also, you may need to add one more setting in iRedAdmin-Pro config file:

HASHES_WITHOUT_PREFIXED_PASSWORD_SCHEME = ['PLAIN-MD5']

6 Reply by murat.ugur

  • murat.ugur
  • Member
  • Offline
  • Registered: 2011-01-21
  • Posts: 26

Re: How to change SSHA512 to SHA512 hash ?

ZhangHuangbin wrote:

Seems you have to use MD5 instead. In iRedAdmin-Pro, please set the password scheme name to 'PLAIN-MD5' (all upper cases) and restart apache or uwsgi service.

Also, you may need to add one more setting in iRedAdmin-Pro config file:

HASHES_WITHOUT_PREFIXED_PASSWORD_SCHEME = ['PLAIN-MD5']

thank you. Best.

7 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,788

Re: How to change SSHA512 to SHA512 hash ?

I think i have the responsibility to WARN you that MD5 (no matter salted MD5 or plain md5) is weak. Use it on your own.