Re: [MRBS-general] bcrypt hashed passwords

[sf <sf...@th...>]

For user authentication I used a table that contained user/pw hashed with md5 to
authenticate MRBS users. The table was created by phpBB in a prior version. Then
phpBB, in an upgrade, changed the password hashing function to use the phpass
method.

My hosting server's php version supports this method since new phpBB forum
users' passwords are correctly authenticated, but when I changed the auth line
to $auth['db_ext']['password_format'] = 'crypt'; the MRBS authorizing function
does not work when using the updated user table.

Is there anything else I could try to get the phpBB user table to work for
authentication? --Thanks.


> 
>  On Thu, May 23, 2013 at 5:21 PM, General purpose list
> (support/developers/users) <mrb...@li...
> <mailto:mrb...@li...> > wrote:
>    > >    On 23/05/2013 03:07, sf wrote:
> >    > I asked a similar question a few months ago. Is the external DB you're
> >    > using generated by phpBB or any other PHP app that uses phpass? I
> >    > believe that bcrypt is really phpass. If it is, I tried setting the
> >    > line
> >    > $auth['db_ext']['password_format'] = 'crypt';
> >    This should work as long your PHP/OS combination have Blowfish support
> >    in the PHP crypt function. If you happen not to have Blowfish support
> >    you'd have to plug in phpass (or something similar) support into
> >    auth_db_ext.inc
> > 
> >    auth_crypt.inc won't help as this is for a password _file_ using crypt,
> >    and has the same requirements on the crypt() function.
> >    John
> > 
> >    --
> >    John Beranek - MRBS Developer <<http://mrbs.sourceforge.net/> >
> > 
> >    To generalise is to be an idiot.
> >      -- William Blake
> > 
> > 
> >   ------------------------------------------------------------------------------
> >    Try New Relic Now & We'll Send You this Cool Shirt
> >    New Relic is the only SaaS-based application performance monitoring
> > service
> >    that delivers powerful full stack analytics. Optimize and monitor your
> >    browser, app, & servers with just a few lines of code. Try New Relic
> >    and get this awesome Nerd Life
> > shirt!<http://p.sf.net/sfu/newrelic_d2d_may>
> >    _______________________________________________
> >    mrbs-general mailing list
> >    mrb...@li...
> > <mailto:mrb...@li...><https://lists.sourceforge.net/lists/listinfo/mrbs-general>
> >    Want to
> > unsubscribe:<mailto:mrb...@li...?subject=unsubscribe>
> >  > 
> 
> 
>  --
>  Quinn Van Horn
>  Instructional Technologist/Math Teacher
>  Thompson Valley High School
>  1669 Eagle Drive
>  Loveland, CO  80535
>  970-613-7980
>