Magento and Drupal don't follow the same schema about password storage.
Drupal uses SHA512 algorithm, while Magento is still using MD5 (with salt).
This module overrides password storage and checking methods on Drupal side to allow to copy/paste the Magento password hash directly into Drupal.
Features
- Support for Magento's password during authentication process,
- Generate password according to Magento algorithm.
Documentation
Classical Drupal passwords start with '$S$':
$S$DrMMgaic7/T35OpDrOm.yW/vlusD3ecfqOu62ZnQiEEC9wZv2pro
Magento passwords don't use prefix, but contains a semi-colon in their middle:
e58d34d72aefb6d6f6c6e419da695252:9Yxn398btH
To match Drupal password policy storage this module will prefix the Magento password with '$M$' like this:
$M$e58d34d72aefb6d6f6c6e419da695252:9Yxn398btH
So you need to use this prefix during your Magento to Drupal data migration.
Otherwise, users won't be allowed to login into Drupal.
Setup
You can too generate password using this algorithm, by enabling it directly on "admin/config/people/accounts" admin screen in the "Magento Security" section.
Credits
Original idea & sponsoring : Actualys
Project information
- Module categories: Security, Integrations, Access Control
- 1 site reports using this module
- Created by Sebastien M. on , updated
- Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.
Releases
Pre-release version: 7.x-1.1-rc1 released 1 Jan 2015 at 13:13 UTC
Development version: 7.x-1.x-dev updated 27 Dec 2014 at 21:23 UTC