question Re: How to compare password in sys_user table ? in ITSM forum

How to compare password in sys_user table ?

vishnu_r — Mon, 17 Nov 2014 09:40:41 GMT

In my script, i'm query'ing the sys_user table with user_name and user_password. this is my query

var user_id='username';

var pass='password@123';

var target = new GlideRecord('sys_user');

target.addQuery('user_name', user_id);

target.addQuery('user_password', pass);

target.query();

while(target.next()){

///code

}

the password type in sys_user table is password(1 way encryption). how to decrypt this password? i tried using GlideEncrypter(); , but not getting the correct data.. Any help ?

Re: How to compare password in sys_user table ?

m_ahmedmod — Mon, 17 Nov 2014 11:55:49 GMT

Hi Vishnu,

I'm certain your query will not work.

Once a password is entered into a 'Password (1 Way Encrypted)' field it is encrypted as a secure hash value which cannot be decrypted.

Introduction to Fields - ServiceNow Wiki

Re: How to compare password in sys_user table ?

Kalaiarasan Pus — Mon, 17 Nov 2014 12:14:04 GMT

Dont really think decryption is possible for user_password field .. this might be the reason ...

Re: How to compare password in sys_user table ?

vishnu_r — Mon, 17 Nov 2014 12:23:43 GMT

Hi kalaiarasan, any other methods like this http://www.servicenowguru.com/system-definition/custom-login-validation-installation-exits/ ??
Can i use this method in a scripted web service?

Re: How to compare password in sys_user table ?

Kalaiarasan Pus — Mon, 17 Nov 2014 12:37:58 GMT

Can you explain what is the exact requirement and what are you trying to achieve ?

Re: How to compare password in sys_user table ?

vishnu_r — Mon, 17 Nov 2014 12:44:06 GMT

Hi kalaiarasan,

I'm using a scripted webservice for authenticating user credentials. From a flex application i'm calling this webservice by passing username & password as input parameters. I need to authenticate the user credentials and return a response. Hope you got my requirement .

Re: How to compare password in sys_user table ?

Subhajit1 — Mon, 17 Nov 2014 12:56:10 GMT

Hi Vishnu,

You can then set both the username and password as system properties and call these properties while invoking the SOAP call.

Re: How to compare password in sys_user table ?

Kalaiarasan Pus — Mon, 17 Nov 2014 13:02:33 GMT

Haven't done this before .. Will try to setup something on demo ... will let you know ....

Re: How to compare password in sys_user table ?

vishnu_r — Mon, 17 Nov 2014 13:56:30 GMT

OK thank you Kalaiarasan

Re: How to compare password in sys_user table ?

vishnu_r — Mon, 17 Nov 2014 14:00:14 GMT

Thanks for the reply Subhajit, But how can i set parameters as system properties? I'm working with a scripted webservice..

Re: How to compare password in sys_user table ?

Subhajit1 — Tue, 18 Nov 2014 05:16:53 GMT

You can use gs.getProperty('your property here'); to call your Username and Password values.

Re: How to compare password in sys_user table ?

Kalaiarasan Pus — Wed, 19 Nov 2014 09:46:38 GMT

It was difficult to search and find your thread back to reply

Not sure if you have found the answer already. if not try below appraoch and see if it works for you ...

Create a scripted web service from where you will authenticate user.. And make your of the below script .. guess it should fit your case .. let me now if it works for you

try

{

var userName = request.user_name;

var userPassword = request.user_password;

var user = GlideUser;

var authed = user.authenticate(userName,userPassword);

if(authed)

{

response.isValid = 'Valid User';

}

else

{

response.isValid = 'Invalid User';

}

catch(e)

{

response.isValid = "Error While Authenticating:"+e;

}

I was able to do it successfully on demo.. So works atleast on demo

Re: How to compare password in sys_user table ?

Kalaiarasan Pus — Wed, 19 Nov 2014 09:49:08 GMT

create the input and output parameters for web service as below

Input:

user_name

user_password

Output:

isValid

Re: How to compare password in sys_user table ?

vishnu_r — Wed, 19 Nov 2014 09:51:06 GMT

Thank you for the reply, I'll check this and update the result...

Re: How to compare password in sys_user table ?

Kalaiarasan Pus — Wed, 19 Nov 2014 10:08:45 GMT

close this once you are done checking Cheers!

Re: How to compare password in sys_user table ?

vishnu_r — Wed, 19 Nov 2014 10:08:52 GMT

Hai Kalaiarasan,
Perfect answer . Thanks for the support

-Vishnu Raj