pssword is nopass ,how to get the plaintext password?

[zhaoyawei]

pssword is nopass ,how to get the plaintext password?

[Niklas Klein]

For anyone who stumbles upon this, I think "nopass" in the cwd_user database means that the user comes from an external directory and no password data is saved in the database. Authorization is instead passed to the external directory e.g. via LDAP or SAML.

[Nic Brough -Adaptavist-]

Where are you seeing "nopass"?

[zhaoyawei]

I see to table store data.

[Nic Brough -Adaptavist-]

Where?

[Suyash Jain {Appfire}]

Hi,

Could you provide more information. You are not specified any details.

Thanks

[zhaoyawei]

I want to be a related system,you need to get user name and password,but read jira coresponding interface does not directly take the password interface,want to remove the username and password directly through the cwd_user table ,but  some passwords are encrypted or nopass,how can I get the plaintext password.

[Andy Heinzer]

The credential value of that table is intentionally encrypted, salted, and hashed.  I don't know of any way for you to decrypt that password, but I think that is by design.  Check out https://community.atlassian.com/t5/Questions/Decode-my-password/qaq-p/47343 both @Nic Brough -Adaptavist- and @VitalyA would tend to agree here.  

[Nic Brough -Adaptavist-]

You could reverse a hash, but given the Earth's current computing power, it would be trillions of years and you'd still end up with billions of potential passwords (clashes).  This is why we use hashes, rather that storing easily-cracked passwords.