Intershop Password

Component ID

2389247

Component name

Intershop Password

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Downloads

816

Component created

Component changed

Component body

Intershop and Drupal don't follow the same schema about password storage.
Drupal uses SHA512 algorithm, while Intershop uses MD5.

This module overrides checking methods on Drupal side to allow to copy/paste the Intershop password hash directly into Drupal, and automatically rewrite Intershop password into Drupal password to match stronger policy at the first user login.

Features

  • Support for Intershop's password during authentication process,
  • Rewrite password according to Drupal algorithm, at the first user login.

Documentation

Classical Drupal passwords start with '$S$':

$S$DrMMgaic7/T35OpDrOm.yW/vlusD3ecfqOu62ZnQiEEC9wZv2pro

Intershop passwords don't use prefix, but use a salt based on Intershop user login:

7faa784c974a6f70ba8692e5db0e0e97

To match Drupal password policy storage this module will prefix the Intershop password with '$I$' and salt 'test' like this:

$I$test:7faa784c974a6f70ba8692e5db0e0e97

So you need to use this pattern during your Intershop to Drupal data migration.
Otherwise, users won't be allowed to login into Drupal.

$I$<username>:<password>

Setup

Just enable this module.

Credits

Original idea & sponsoring : Actualys