Tickets :: Comment on [#2863] Corrected handling of {SSHA} and {SMD5} salt

* Your Email Address
* Spam protection	Enter the letters below: .___.___.__ . .._. [__ [__ \| \\| \| \| \| \| \|__/\|__\|_\|_
Comment	>>> +) The format for both schemes is (in pseudo-code) > >>> base64_encode(hash(password . salt) . salt). getSalt() did return the > >>> the still encoded value when $seed was set, and a raw value when > >>> generating a new one. > >> > >> But this is only true for LDAP servers storing the hashes in the > >> tree, right? Auth is not only for LDAP servers. > > > > I must admit that I do not know any other applications that use SSHA > or SMD5, so I can't really comment on that. I simply thought that > other applications will store the password in the same format.
Attachment
Watch this ticket