This question has been flagged
6 Replies
9518 Views

I have locked myself out of my OpenERP by forgetting my password (doh!) so as topic says I need to enable password recovery directly within the database. In which table etc. can I do it?

Btw, I am using the auth_crypt module so I cannot just simply recover my old password by looking in res_users.

Thanks in advance

Avatar
Discard
Best Answer

If you are talking about the OpenERP admin user password, you can recover it if your database passwords aren't encrypted. (as for any other OpenERP user password)But I recommend you can follow some related articles like  the The Best Online Available Password Manager For Database: http://www.passwordmanagers.net/The-Best-Online-Available-Password-Manager-For-Database.html.

I believe you can get some free and useful tips about master password recovery.

For the basic protection of Password Manager For Web Database, you can follow to http://www.passwordmanagers.net/Password-Manager-For-Web-Database.html.

Avatar
Discard
Author Best Answer

Btw, I am using the auth_crypt module so I cannot just simply recover my old password by looking in res_users.

Avatar
Discard
Best Answer

Normally what you do is provide in the clear text section of the database that looks like random text in the password field is a string of random text that matches a password that is known to decode to a known password.

An example in the context of PostgreSQL http://postgresql.1045698.n5.nabble.com/Algorithm-for-generating-md5-encrypted-password-not-found-in-documentation-td4919082.html

Avatar
Discard
Author

You cannot decode a hash - you can use a rainbow table to do a lookup but with a salt that is almost not possible. And further the hashing is not done by PostgreSQL but by the auth_crypt module which from what I know is not the same as the simple integrated MD5 hashing function in PostgreSQL.

I simply want to know where I can enable the password recovery (from the login screen) in the database. Which table and row do I need to edit? (I do not want to waste time RE the auth_crypt module so I can create a new MD5 hash based on what ever salt the module is using.)

The object is base.config.settings and the field is auth_signup_reset_password

Author

Fabrice, thank you so much. :)