• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

verify password with hash

Macs01

Basic Pleskian
I have developed an external application. Users uses the plesk username and password for authentication. Now I have activated the password encryption.
Therefore, I would like to know how I can use the entered password to verify it via the hash in Plesk api (Format: $5$rEET) or in the Databank (Format: $AES-128-CBC$/123 in `psa`.`smb_users`)?

Thanks Macs
 
Hello Igor,

do you have a solution for me? In another forum, there are other people who needs a solution.

Thanks Macs
 
Macs I don't think you can get that information here on public forums. May I suggest that you create a ticket with them?
 
Hello Abdi, please tell me why I can´t get this information here on the public forum? An encryption method with salt/hash is a standard procedure in many websolutions e.g. joomla, wordpress... There is no secret, except it is not implemented properly.
 
Well, I said so because there are a number of un-answered threads in that regard.
 
Meanwhile I do not think it is a real encryption. According to my tests, I think they having a master password.
 
I have developed an external application. Users uses the plesk username and password for authentication. Now I have activated the password encryption.
Therefore, I would like to know how I can use the entered password to verify it via the hash in Plesk api (Format: $5$rEET) or in the Databank (Format: $AES-128-CBC$/123 in `psa`.`smb_users`)?

Thanks Macs

For hash comparing you should know algorithm and you should have key because it is symmetric encryption. Sorry, but it is not public information.
 
Back
Top