Tickets :: Comment on [#2865] Support for switching to a new password scheme

* Your Email Address
* Spam protection	Enter the letters below: .. .. ..__.. . \|\|_/ \|\/\|\| \|\| \| \__\|\| \\| \|\|__\\|__\|
Comment	> Oh, and one other thing. (It's not a security issue though, rather an > > interoperability problem.) > > > > In Auth::getCryptedPassword(), there are two password schemes that have > > "{MD5}" as an identifier, neither of which have "md5" as the parameter > > name. As the default scheme is hex-encoded MD5 and not base64-encoded, > > this makes my patch not work with LDAP backends. > > > > An updated version that also fixes the issue of not setting $encryption > > if not finding a scheme identifier is attached.
Attachment
Watch this ticket