Koozali.org: home of the SME Server

Consolidation of user authentication

Twanneke

Consolidation of user authentication
« on: February 20, 2007, 03:38:43 PM »
High folks,

Sounds complex but didn't know how to formulate otherwise. My SME server runs perfectly with a jukebox, webmail, Web-based ftp, Joomla etc.
Now the part that frustrates me:

All the applications above use their own Mysql table with different fields to authenticate users. What I would like is add a user in the control panel and that same user would have access to all the applications I mentioned above.

Does anyone know how to reach that goal or would be interested in working together on achieving this? Perhaps there are sample scripts on how adding or changing lines in a mysql database when adding or changing a user or password in the server-manager?

Thankx in advance for the reply,

Twan

Offline bpivk

  • *
  • 908
  • +0/-0
    • http://www.bezigrad.com
Consolidation of user authentication
« Reply #1 on: February 20, 2007, 03:58:29 PM »
This is not possible.
Some websites encrypt passwords when you submit for acount so instead of let's say admin with password admin you get admin with password jhnvsoih when you look at it in mysql database.
This is done so you (admin) can't read passwords of other users (you would have a pass, username and mail, now how many people use exact same passwords and usernames?).
"It should just work" if it doesn't report it. Thanks!

Twanneke

Consolidation of user authentication
« Reply #2 on: February 20, 2007, 04:41:55 PM »
I don't have to know the password as long as the script uses the same encryption to change the password(?). The encryption level can be found by contacting the developer. I was thinking of using the user table in e-smith and add extra rules in the passwd script or so. If a user can change his or her password in a website, then it should be possible from the commandline as root. But perhaps I'm wrong.

Thankx for the reply,

Twan

Offline bpivk

  • *
  • 908
  • +0/-0
    • http://www.bezigrad.com
Consolidation of user authentication
« Reply #3 on: February 20, 2007, 04:46:52 PM »
No. If he changes the masked password with a simple one he'll brake it and it won't work.
Yes you can change the pass via cms pannel but you have to know that server then uses an algoritm to encrypt the new pass and then writes it to sql table. This algoritm can be changed (check config.php in roundcube and you'll find it).

The only do able way would be to use ldap on websites (if suported).
"It should just work" if it doesn't report it. Thanks!