Importing Users From Another Application

[tkearl]

I am using version 5.1 and I want to convert my company from another CRM product. When I try to import the user/employee records there is no way to map their current passwords. WHY? Is it possible for me to do this?? I want to make the transition as smooth as possible. ANY IDEAS?

TK

[eggsurplus]

It's nearly impossible to import passwords because of not knowing how they are stored in the legacy system. Obviously, clear text isn't as hard. The issue is when they are hashed, encrypted, etc. If you are really experienced you may be able to programmatically convert the passwords from your old system to Sugar.

[tkearl]

The passwords are plain text so there is no encryption. How would I import??

[andopes]

Hi TK

Use the MD5() function to encrypt it.

If you are going to export directly from the other database: SELECT MD5(password_field) AS password_field.
Where password_field is the name of the field into other database which store the password.

If you are going to encrypt through php: $password = md5($password);

Cheers

[eggsurplus]

Exactly as Andopes stated. Here's the function in Sugar used to save the password:

     function change_password($user_password, $new_password) {
        global $mod_strings;
        global $current_user;
        $GLOBALS['log']->debug("Starting password change for $this->user_name");
 
        if (!isset ($new_password) || $new_password == "") {
            $this->error_string = $mod_strings['ERR_PASSWORD_CHANGE_FAILED_1'].$current_user['user_name'].$mod_strings['ERR_PASSWORD_CHANGE_FAILED_2'];
            return false;
        }
 
        $old_user_hash = strtolower(md5($user_password));
 
        if (!is_admin($current_user)) {
            //check old password first
            $query = "SELECT user_name FROM $this->table_name WHERE user_hash='$old_user_hash' AND id='$this->id'";
            $result = $this->db->query($query, true);
            $row = $this->db->fetchByAssoc($result);
            $GLOBALS['log']->debug("select old password query: $query");
            $GLOBALS['log']->debug("return result of $row");
 
            if ($row == null) {
                $GLOBALS['log']->warn("Incorrect old password for ".$this->user_name."");
                $this->error_string = $mod_strings['ERR_PASSWORD_INCORRECT_OLD_1'].$this->user_name.$mod_strings['ERR_PASSWORD_INCORRECT_OLD_2'];
                return false;
            }
        }
 
        $user_hash = strtolower(md5($new_password));
 
        //set new password
        $query = "UPDATE $this->table_name SET user_hash='$user_hash' where id='$this->id'";
        $this->db->query($query, true, "Error setting new password for $this->user_name: ");
        return true;
    }