[Building Sakai] How to retrieve password of sakai user

[Mark J. Norton]

Ali:

When Steve says you can't, it not only means that there is no way to 
retrieve the Sakai user password via an API, but that it's also a BAD 
idea.  The whole Sakai security model is based (in part) on not 
accessing passwords "in the clear".  Provisions are made to take a 
password string supplied by a user (etc), which is encoded and compared 
to the value kept in the database.  See the Authentication service.

You may want to think a bit more about why you need the original 
password from Sakai.  Usually, it's for purposes of single sign-on.  
Sakai does have the ability to accept authentication from an external 
service, such as CAS.  This is the preferred way to handle such things.

- Mark Norton


On 3/27/2012 9:03 AM, Ali Jan wrote:
> I want to write a webservice that will retrieve password of given user.
>
> what algorithm is for password hashing.
>
> Thanks
>
> On Tue, Mar 27, 2012 at 6:00 PM, Steve Swinsburg 
> <steve.swinsburg at gmail.com <mailto:steve.swinsburg at gmail.com>> wrote:
>
>     Hi,
>
>     You can't, you'll have to either reset it for them in the Admin
>     Users tool, or use the reset password tool and they can do it
>     themselves.
>     Or use the web services.
>
>     cheers,
>     Steve
>
>
>
>     On 27/03/2012, at 11:50 PM, Ali Jan wrote:
>
>     > HI
>     >
>     > How to retrieve password of a sakai user.
>     >
>     >
>     > Thanks
>     > _______________________________________________
>     > sakai-dev mailing list
>     > sakai-dev at collab.sakaiproject.org
>     <mailto:sakai-dev at collab.sakaiproject.org>
>     > http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>     >
>     > TO UNSUBSCRIBE: send email to
>     sakai-dev-unsubscribe at collab.sakaiproject.org
>     <mailto:sakai-dev-unsubscribe at collab.sakaiproject.org> with a
>     subject of "unsubscribe"
>
>
>
>
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20120327/711f522d/attachment.html