[389-users] Data corruption after upgrade.

Theunis De Klerk theunis at pier29.co.za
Wed Aug 19 23:12:17 UTC 2009


> Were these applications that pre-hashed the SSHA passwords, then sent
> the pre-hashed SSHA password to the server, when adding a user or
> modifying the password?  If so, then it could be that the legacy SSHA
> handling was broken.

Here is an example of the perl code I used to create the password.

<snip>
my $password = 'thepassword';
use Digest::SHA1;
use MIME::Base64;
my $ctx = Digest::SHA1->new;
$ctx->add($password);
$ctx->add('salt');
my $hashedPasswd = '{SSHA}' . encode_base64($ctx->digest . 'salt' ,'');
</snip>

i.e: the way not to do it.




More information about the Fedora-directory-users mailing list