Import wizard :: input/algo for u.pass_crypted

adriansev · July 24, 2024, 12:51pm

Hi! Does anyone know the expected algorithm (or how to generate) u.pass_crypted for new users that i want to import?

ksar · July 24, 2024, 12:56pm

Dolibarr/dolibarr/blob/19.0/htdocs/core/lib/security.lib.php#L236


      
          *  If constant MAIN_SECURITY_HASH_ALGO is defined, we use this function as hashing function (recommanded value is 'password_hash')
          *  If constant MAIN_SECURITY_SALT is defined, we use it as a salt (used only if hashing algorightm is something else than 'password_hash').
          *
          * 	@param 		string		$chain		String to hash
          * 	@param		string		$type		Type of hash ('0':auto will use MAIN_SECURITY_HASH_ALGO else md5, '1':sha1, '2':sha1+md5, '3':md5, '4': for OpenLdap, '5':sha256, '6':password_hash).
          * 										Use 'md5' if hash is not needed for security purpose. For security need, prefer 'auto'.
          * 	@param 		string		$nosalt		Do not include any salt
          * 	@return		string					Hash of string
          *  @see getRandomPassword(), dol_verifyHash()
          */
          function dol_hash($chain, $type = '0', $nosalt = 0)
          {
          	// No need to add salt for password_hash
          	if (($type == '0' || $type == 'auto') && getDolGlobalString('MAIN_SECURITY_HASH_ALGO') && getDolGlobalString('MAIN_SECURITY_HASH_ALGO') == 'password_hash' && function_exists('password_hash')) {
          		return password_hash($chain, PASSWORD_DEFAULT);
          	}
          
          	// Salt value
          	if (getDolGlobalString('MAIN_SECURITY_SALT') && $type != '4' && $type !== 'openldap' && empty($nosalt)) {
          		$chain = getDolGlobalString('MAIN_SECURITY_SALT') . $chain;
          	}