Quantcast
Channel: SCN : All Content - Security
Viewing all articles
Browse latest Browse all 2858

Password-hash calculation

$
0
0

hi!


passwords of our internet users are stored in BAPIUSW01-PASSWORD as a password hash. The hash is calculated by the system-call XXPASSNET.


After we changed the password ruleset (kernel parameters login/min_password_digits and so on), hashes generated previously are no valid passwords anymore. The call returns an empty hexpass. In other words: no user can login anymore.


Is there a way to calculate a hash from a given string (=password) in the same way as XXPASSNET does? I already tried FM MD5_CALCULATE_HASH_FOR_CHAR or CALCULATE_HASH_FOR_CHAR, but they do not return the same result. Looks like XXNETPASS does not use MD5 or SHA1 but something else?


We authenticate using BAPI_PAR_EMPLOYEE_CHECKPASSWOR, which calls FM  WWW_USER_AUTHORITY - inside, there is XXNETPASS called.


Thanks for all information


Roland


Viewing all articles
Browse latest Browse all 2858

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>