<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<TITLE>Nachricht</TITLE>
<META content="MSHTML 6.00.2800.1126" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=503331811-24022003><FONT face=Arial color=#0000ff size=2>This
is used only for adding users that have been previously exported during an
import. Such users will have their password already encrypted, and the already
encrypted password must be added "plain".</FONT></SPAN></DIV>
<DIV><SPAN class=503331811-24022003><FONT face=Arial color=#0000ff size=2><FONT
size=2></FONT></FONT></SPAN> </DIV>
<DIV><SPAN class=503331811-24022003><FONT face=Arial color=#0000ff size=2><FONT
size=2>Best Regards,<BR>Alex.<BR><BR>Alexander Kandzior<BR>Alkacon Software -
The OpenCms Experts<BR><A
href="http://www.alkacon.com/">http://www.alkacon.com</A></FONT>
</DIV></FONT></SPAN>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=de dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B>
owner-opencms-dev@www.opencms.org [mailto:owner-opencms-dev@www.opencms.org]
<B>On Behalf Of </B>Laurent Vernet<BR><B>Sent:</B> Monday, February 24, 2003
11:56 AM<BR><B>To:</B> opencms<BR><B>Subject:</B> [opencms-dev] password for
addImport() method not encrypted.<BR><BR></FONT></DIV>
<P><FONT size=2>Hi from France,<BR><BR>Is it normal to have the <FONT
face="Arial Black">'password'</FONT> field in the method <FONT
face=Arial><FONT face="Arial Black">'addImportUser</FONT>(...)</FONT>' not
encrypted ?<BR>The code in the Oracle <FONT
face="Arial Black">'CmsDbAccess'</FONT> class looks like
that:<BR><BR>###############<BR><BR><FONT size=3>
<STRONG> </STRONG></FONT><EM><STRONG><FONT face=Arial
size=3> <FONT
face="Arial Black"> <FONT size=2> // crypt the password with
MD5<BR>
statement.setString(3,
checkNull(password));<BR>
statement.setString(4,
checkNull(recoveryPassword));<BR>
statement.setString(5,
checkNull(description));<BR>
statement.setString(6,
checkNull(firstname));<BR></FONT></FONT></FONT></STRONG></EM><BR>###############<BR>but
there's no encryption method called, like in <STRONG><FONT
face="Arial Black">'<EM>addUser</EM>'</FONT></STRONG>.</FONT></P>
<P><FONT size=2>Maybe the call to the method <EM><FONT
face=Arial><STRONG><FONT
face="Arial Black">'digest</FONT>(...)</STRONG></FONT></EM>' is
missing.</FONT></P>
<P><FONT size=2>Regards,<BR><BR>Laurent Vernet<BR>148 Rue Anatole
France<BR>92688 Levallois-Perret Cedex<BR>T: +33 1 55 63 18 17<BR>E:
laurent.vernet@fr.adp.com </FONT></P></BLOCKQUOTE></BODY></HTML>