Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread Gerald Young
h more general solution to the > problem. > > ** ** > > *From:* otrs-boun...@otrs.org [mailto:otrs-boun...@otrs.org] *On Behalf > Of *Gerald Young > *Sent:* Monday, March 04, 2013 9:02 AM > *To:* User questions and discussions about OTRS. > *Subject:* R

Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread David Boyes
ions about OTRS. Subject: Re: [otrs] How can I reset passwords for all customers? "I need to reset passwords to values that are later communicated to customers" I don't see how this is good security, especially since the passwords aren't forced to reset and you've now ge

Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread Bogdan Iosif
You're right, leaving the reset to the customers would've been better. Unfortunately, we've already committed to having those passwords on hand because some of our customer accounts have invalid emails (they don't want to provide an email address to be 100% sure they don't get any notifications) an

Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread Gerald Young
"I need to reset passwords to values that are later communicated to customers" I don't see how this is good security, especially since the passwords aren't forced to reset and you've now generated a list of passwords for all your users in plain text after a potential security breach. I realize you

Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread Bogdan Iosif
I don't think this would work for me because I need to reset passwords to values that are later communicated to customers. It can't easily be done just at the db level because the pw hash is salted with their usernames. - OTRS mail

Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread Bogdan Iosif
I was just about to write back that I managed to get my problem solved by slightly modifying the existing otrs.SetPassword.pl. Your version is cleaner than mine though so I won't post my version. Thanks! On Mon, Mar 4, 2013 at 3:44 PM, Michiel Beijen wrote: > Hi Bogdan, > > There is currently

Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread Gerald Young
UPDATE customer_user SET pw="Ra@ndomString!" Brute force, but definitely would work. On Mon, Mar 4, 2013 at 6:38 AM, Bogdan Iosif wrote: > Hi, > > I need to perform a mass reset of all customer passwords, for security > reasons (hundreds of accounts). > > Is there a shell script I can call to

Re: [otrs] How can I reset passwords for all customers?

2013-03-04 Thread Michiel Beijen
Hi Bogdan, There is currently no such script in the framework. But I wrote this script a while ago, feel free to use it: https://gist.github.com/mbeijen/5082292 it works very similar to the current script for agents. The only difference is if you do not provide a password on the command line, it

[otrs] How can I reset passwords for all customers?

2013-03-04 Thread Bogdan Iosif
Hi, I need to perform a mass reset of all customer passwords, for security reasons (hundreds of accounts). Is there a shell script I can call to reset the password for each customer account? Can it be done directly from the database, without using Perl / OTRS framework? Thanks, Bogdan P.S:I tho