Get Current User Password

[jlabuelo]

Hi there

I need to inlude a link to connect SugarCRM with another web application we have. Login and Password are the same in both systems.

What I do in the link is to send a POST method with two variables, login & password where I should include the current user login and password.

I know that to get the current user login I can use the variable $current_user->user_name.... but how can I get the password to be send also in this post call?. Is it possible to get it like $current_user->password???.... if so what is the right syntax?.

If not where I can look for the password (tables, files...)?.... Will it be encrypted?, if so how can I recober it?

Thanks a lot guys!!

[christianknoll]

You cannot recover it. Sugar properly stores the MD5 of the password in the user_hash field of the table users. Read that and pass it to the other application. In that application accept this as a MD5 hash and compare the MD5 hashes there.

christian.

Hi there

I need to inlude a link to connect SugarCRM with another web application we have. Login and Password are the same in both systems.

What I do in the link is to send a POST method with two variables, login & password where I should include the current user login and password.

I know that to get the current user login I can use the variable $current_user->user_name.... but how can I get the password to be send also in this post call?. Is it possible to get it like $current_user->password???.... if so what is the right syntax?.

If not where I can look for the password (tables, files...)?.... Will it be encrypted?, if so how can I recober it?

Thanks a lot guys!!

[rafael.q.g@hotmail.com]

Yes, user password is not possible to be recovered by the explanations above. Sugar do not keep it, just the hash code.

What I recommend you do do, is to create one user just to make this comunication with your external system (or use your admin user). Then you could use the current user id to paramerize some access rights rules.

[jlabuelo]

Hi Rafael

Thanks for the answer, I think we are gonna synchronize the systems using LDAP so I will have to figure out how to do it this way.

Cheers

[montolla]

Helo every body.

I am "customing" a module, but I need to know the user name and password (md5 it works for me) of the current user, how can I know it?, I am using SUGARCRM CE 6.1.6 and PHP 5.2.x


Too much thanks.

[Angel]

The md5 hash of the password is in the user_hash field in the users table. Retrieve that via the API call get_entry() and you are set.

As for the original problem, you might want to consider doing it the other way around, i.e. login to the other system first and use the seamless_login() option on the Sugar API to then establish a connection to Sugar. You can redirect them to the Sugar URL afterwards if you like too.