Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Where can i find the passwords of users?

    Scheduled Pinned Locked Moved
    Captive Portal
    2
    11
    6.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GruensFroeschliG
      GruensFroeschli
      last edited by

      You can download the config.xml file (in /conf/config.xml) and copy the captive portal relevant part over to the new setup.
      Or just go to "Diagnostics" –> "Backup/Restore" and select in the dropdown "captive portal".
      On the new setup you then can restore this part.

      We do what we must, because we can.

      Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

      1 Reply Last reply Reply Quote 0
      • M
        MrLOVER
        last edited by

        @GruensFroeschli:

        You can download the config.xml file (in /conf/config.xml) and copy the captive portal relevant part over to the new setup.

        how can i download this file to other pc that is connected to pfsense using gui?

        @GruensFroeschli:

        Or just go to "Diagnostics" –> "Backup/Restore" and select in the dropdown "captive portal".
        On the new setup you then can restore this part.

        its a good idea, but i think if i backup everything of my pfsense 1.2.3 RC1 now and when i'll upgrade to latest version will that backup still be usable?

        1 Reply Last reply Reply Quote 0
        • GruensFroeschliG
          GruensFroeschli
          last edited by

          Yes it should still be usable.

          Diagnostic –> Command Prompt --> Download - File to download:

          We do what we must, because we can.

          Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

          1 Reply Last reply Reply Quote 0
          • M
            MrLOVER
            last edited by

            I've downloaded the xml file. but is shows password in coding language???
            like this is a user name and password i can see

            <user><name>MrLOVER</name>
            <fullname>MrLOVER</fullname>
            <expirationdate>11/18/2010</expirationdate>
            <password>2804890a4b43e24d922447ddaaad3b2a</password></user>

            did you see? the password field is "2804890a4b43e24d922447ddaaad3b2a" like this.
            how can i know what is the password?

            1 Reply Last reply Reply Quote 0
            • GruensFroeschliG
              GruensFroeschli
              last edited by

              Well that IS the password (or at least the hash of it).
              There is not more stored. Nowhere.
              This is all you need.
              If you copy this to the new setup it will work.

              We do what we must, because we can.

              Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

              1 Reply Last reply Reply Quote 0
              • M
                MrLOVER
                last edited by

                ok thanks it will help me to restore all users.
                but i still wanna know…
                what does that hash language called? is there any software that can convert that language into simple?

                1 Reply Last reply Reply Quote 0
                • GruensFroeschliG
                  GruensFroeschli
                  last edited by

                  The passwords are never stored in cleartext.
                  Imagine, someone gains access to your pfSense and then has all passwords.

                  In a secure design, you don't store the passwords directly.
                  You build a hash over the password (usually md5) (more info on this here http://en.wikipedia.org/wiki/MD5 )
                  and then store this hash.
                  It's not possible to find out what the password was out of this hash.

                  Now if you request from an user a password, the user enters it's password, build a hash over this entered password, and compare it with your stored hash. If they match the user entered the correct password.

                  So the system doesn't actually compare the passwords you enter, but the hash out of it.

                  We do what we must, because we can.

                  Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                  1 Reply Last reply Reply Quote 0
                  • M
                    MrLOVER
                    last edited by

                    @GruensFroeschli:

                    The passwords are never stored in cleartext.
                    Imagine, someone gains access to your pfSense and then has all passwords.

                    In a secure design, you don't store the passwords directly.
                    You build a hash over the password (usually md5) (more info on this here http://en.wikipedia.org/wiki/MD5 )
                    and then store this hash.
                    It's not possible to find out what the password was out of this hash.

                    Now if you request from an user a password, the user enters it's password, build a hash over this entered password, and compare it with your stored hash. If they match the user entered the correct password.

                    So the system doesn't actually compare the passwords you enter, but the hash out of it.

                    thats a very good thing, i didn't know this before.
                    i have one last question regarding this topic and that is…
                    i have downloaded xml file that has all user names and their password hashes. now when i want to restore them to my newly installed server. should i just upload this xml file and replace the existing file on server? if yes then how can i upload? i mean should i use the diagnostic -> command -> upload file option? if yes then will it ask me to replace it or will it replace it?
                    or is there any other way where i can upload and replace the server xml file?

                    thanks a lot in advance :)

                    1 Reply Last reply Reply Quote 0
                    • GruensFroeschliG
                      GruensFroeschli
                      last edited by

                      I wouldn't bother with extracting the relevant part out of the config.xml manually.

                      Just go to
                      Diagnostics –> Backup/Restore --> Backup configuration
                      and select "Captive Portal" from the dropdownlist.
                      This automatically downloads everything you need.

                      To restore this go to
                      Diagnostics --> Backup/Restore --> Restore configuration
                      select Captive Portal from the dropdown and upload the file you download before.

                      We do what we must, because we can.

                      Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                      1 Reply Last reply Reply Quote 0
                      • M
                        MrLOVER
                        last edited by

                        @GruensFroeschli:

                        I wouldn't bother with extracting the relevant part out of the config.xml manually.

                        Just go to
                        Diagnostics –> Backup/Restore --> Backup configuration
                        and select "Captive Portal" from the dropdownlist.
                        This automatically downloads everything you need.

                        To restore this go to
                        Diagnostics --> Backup/Restore --> Restore configuration
                        select Captive Portal from the dropdown and upload the file you download before.

                        thats what i want. its resolved now.
                        and thanks for your great help.
                        i love pfsense :)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post