Modx 2.2 password hashing to Joomla 1.5.14 algorithm [SOLVED]

I'm in the process of migrating a site from Jooma 1.5.14 to ModX 2.2 and want to transfer over all the users and permissions via some mysql database imports.

The only issue I see is the difference in password hashing. Is there a way to modify modx to use joomla's password hashing for this instance of modx to avoid having to have all the users reset their passwords?

any other options are welcome as well.

Thanks in advance, [ed. note: philip.bennett last edited this post 14 years, 8 months ago.]

In MODX 2.1+ you can specify the hashing algorithm used per user and could even provide a custom algorithm to mimic Joomla!'s I suppose.

Thanks opengeek -

Is there any information located in the documentation on changing the hashing algorithm?

Not at the moment. I'll add that to the list of things to document. But the implementations are very simple. You can find the modHashing service class along with the MD5 and PBKDF2 implementations at https://github.com/modxcms/revolution/tree/develop/core/model/modx/hashing — they are pretty straightforward to implement:

— MD5 : https://github.com/modxcms/revolution/blob/develop/core/model/modx/hashing/modmd5.class.php
— PBKDF2 : https://github.com/modxcms/revolution/blob/develop/core/model/modx/hashing/modpbkdf2.class.php

If I create a new 'joomla.class.php' in the directory that replicates the algorithm I want to use. How do I set modx to start using that one globally or for specific users? (modx 2.2)

Thanks!

*Joomla algorithm for reference: md5(password + md5(salt)):md5(salt) [ed. note: philip.bennett last edited this post 14 years, 8 months ago.]

I've looked around all the user settings and security settings to find an option for which algorithm is used. Does this required setting a custom setting variable?

Is there also some code I'll need to change when modx verifies the users password?

Thanks in advance. [ed. note: philip.bennett last edited this post 14 years, 8 months ago.]

Each user record specifies a hash_class. If you add your class to that directory and set the user's salt appropriately and the hash_class to "hashing.Joomla" (assuming you named your class Joomla), you should not have to modify any code.