How to import/export accounts?

[spongebob]

Hi all!

I have an FM DB that I distribute to a few branch offices. Each office has their data in it and each office has their accounts, privelege sets and passwords in it.

From time to time I want to send them an upgraded file. When they get that they will click a button and all the data from their file "flies" into the new file via import/export. Filemaker is "readied" for this as for example there exists the function "Set next serial value" which allows you to transfer the next serial values from one file to another.

However, I havent worked out how to transfer the accounts automatically from one file to another. I already manage my accounts in a seperate table so I can in my new file generate the accounts I need.

But how do I transfer the passwords automatically? Is there any new functionality in FM 9 re this (Im still using 8.5)?

Further, whats the word on File Stability and File Corruption in FM 9? Has it been improved? Should I upgrade?

Thanks

[Steven H. Blackwell]

FileMaker Pro files do not have their passwords stored in them. if you are using some ersatz system, that is a severe security risk.

Take a look at External Server Authentication, where the Accoutns are managed by the server rather than within FIleMaker Pro. There is a Tech Brief on this topic.

For more on issues related to ersatz security systems see the Security Tutorial Videos on the filemakersecurity.com web site.

HTH

Steven

[spongebob]

I think theres a misunderstanding here.

I store the usernames in a table that I use to generate accounts in the already provided accounts section of Filemaker. All Passwords are stored and managed in that Accounts section provided by filemaker.

I wonder if they can be transferred out of there into another file in any way by export/import.

As my solution is a distributed one I have no desire to centrally manage passwords.

Possible?

[Vaughan]

"I think theres a misunderstanding here."

Like Steven said, passwords are NOT stored in FMP 7.0 and later files. There is NO WAY to get them out, because they aren't in there.

When accounts are created, FMP creates a hash of the password (a kind of encoded key) and stores the hash inside the file. By the very nature of hashes there is no way to reverse the encoding and discover what the original password was.

[spongebob]

Hi; thank you Vaughan for the correction/precision; so of course the passwords are "stored in the file"; just not in the clear (which is of course what I meant all along I thought that was a given).

I do not think that using Filemakers own hashing algorithm is a security risk; and Im not using any ersatz system as I think Stephen mistakenly assumed.

Thanks also for answering my actual question. I suspected as much but wanted to be 100 pro sure. No is also a good answer and in this case its actually a desired feature I guess.

Thanks much!

Spongebob