Different encrypted passwords in cached passwords

Discussions about product bugs & problems!
Note: This is no replacement for the Official ETM Support!
3 posts • Page 1 of 1
kdroog4pvss
Posts:15
Joined: Wed Sep 22, 2010 10:17 am

Different encrypted passwords in cached passwords

Post by kdroog4pvss »

Why are the cached passwords in the internal datapoint _Users.Password not in the same format?

Following two examples are present:

short one: _939301XUDM6
long one: #PBKDF2#6tL8ibP4T4Ulrkt50FSe7A==#2484#SUoKdVj4IZFoxj4OREVpDw==

The user administration is taking its info from the Windows Domain.

Users are logging in from terminal server or citrix workspace with SSO.

What can cause the difference in passwords?

System:
W2016, WinCC OA version on server and terminal server 3.15p20, on citrix workspace 3.15p??

kilianvp
Posts:443
Joined: Fri Jan 16, 2015 10:29 am

Re: Different encrypted passwords in cached passwords

Post by kilianvp »

The PKCS5 compliant password hashing of the crypt() function, returns a different hash each time crypt is called (even with the same string).


#PBKDF2#<salt>#<iterations>#<passhash>

leoknipp
Posts:2928
Joined: Tue Aug 24, 2010 7:28 pm

Re: Different encrypted passwords in cached passwords

Post by leoknipp »

The encryption of passwords worked different in several WinCC OA versions.
Maybe the short passwords have been generated with an old version and therefore the length and also the "syntax" differs.

Best Regards
Leopold Knipp
Senior Support Specialist

3 posts • Page 1 of 1