Migrated password hashes support

Thanks @pfaffman

I’ve done some testing and can confirm that it doesn’t work with Drupal 7, which apparantly uses SHA-512 according to Drupal 7: Secure password storage by default at last | Jon Cave

I’ll create a PR if I’m able to add a compatible one.

Rich

3 « J'aime »

Hello :wave:

I migrated a whole lot of content from bbPress over to my discourse installation. I can see all posts and users and stuff. But my users can’t login using their “old” password data from my WP site. I installed the plugin, its listed in my plugin section of my admin area. I checked all the available check marks.

Still: nobody can login!
I also have no idea where to apply the given code from the plugin’s readme:

user = User.find_by(username: 'user')
user.custom_fields['import_pass'] = '5f4dcc3b5aa765d61d8327deb882cf99'
user.save

Also I have no idea what exactly is meant by alternative password hashes talked about in the readme.

@michaeld could you provide some more guidance on how to use the plugin?

As far as I recall the bbpress importer supports the plugin, so you did everything right and that is all you would need to do.

1 « J'aime »

Oh my god, after some more testing it turned out that it actually worked. The problem was a changed password when I tested it :man_facepalming: Sorry! Thanks for the great plugin! Made my life a lot easier!

2 « J'aime »

Hi, I’m having problems making this work. I’ve created a custom field import_pass and installed the plugin. Ran the import script once again on my SMF database but with no luck, no one can login afterwards. On the custom field I can see just a “-“ instead of some hash.

Like other users pointed out before, not sure what do with this:

user = User.find_by(username: 'user')
user.custom_fields['import_pass'] = '5f4dcc3b5aa765d61d8327deb882cf99'
user.save

Appreciate any guidance Does this code go in the smf2.rb import script file or what?

That won’t work. But there is no need to install the plugin during import, or to create a custom field manually. It should be handled by the SMF2 script already. So something else is up.

The code is there as an example for script authors. It’s already in the SMF2 script.

3 « J'aime »

Thanks. That’s great. So you mean, if I remove the manually created custom field and just keep the plugin activated, then it should work by itself and pick up the password hashes when it needs too.

Is there a log we can check to see why the plugin isn’t doing what is supposed to?

The plugin takes care of interpreting and using the custom fields that have been set by the importer. If the custom fields are empty or not there, then it is not an issue with the plugin, but an issue with the importer.

2 « J'aime »

Le plugin doit-il être installé avant ou après la migration ? Ou cela ne change-t-il rien ?

TL;DR : après.

Vous devez installer le plugin sur l’instance qui exécute réellement le forum migré.

Nous avons constaté des cas où le plugin causait des problèmes lorsqu’il était installé sur une instance exécutant le script de migration ; nous vous déconseillons donc de l’installer dans ce cas.

4 « J'aime »

Bonjour,

Quelqu’un a-t-il déjà testé avec des hachages de mots de passe provenant d’Auth0 ?

Je ne peux pas simplement tester car l’exportation des hachages de mots de passe est un service payant réservé aux clients. Je voulais simplement savoir si quelqu’un a déjà essayé avant de me lancer moi-même dans cette voie.

Il semble que leurs mots de passe soient hachés avec bcrypt, avec 10 tours de sel.

Merci.

2 « J'aime »

Bonjour, y a-t-il eu des changements concernant la prise en charge de Drupal 7 ?

Oups, question datant de 2 ans que j’ai manquée !

bcrypt devrait être pris en charge quel que soit le nombre de tours, tant que les tours sont encodés de la manière habituelle ($2a$10$...)

Non, ce code n’a pas été touché depuis plus de 3 ans.

1 « J'aime »