[Tickets #9275] Re: crypt-md5 password with show_encryption doesn't work

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9275
------------------------------------------------------------------------------
  Ticket             | 9275
  Updated By         | tonton at bdefracte.org
  Résumé           | crypt-md5 password with show_encryption doesn't work
  Queue              | Passwd
  Version            | HEAD
  Type               | Bug
  État              | Not A Bug
  Priorité          | 2. Medium
  Milestone          |
  Patch              | 1
  Propriétaire      |
------------------------------------------------------------------------------


tonton at bdefracte.org (2010-10-21 14:23) wrote:

So the problem of not passing the right encryption to  
Auth::getCryptedPassword is the Auth::getSalt function not the crypt  
one. The salt generated is not the same for crypt-md5 and crypt, so  
the old password given is encrypted with the crypt method and it  
cannot match the one previously stored that is a crypt-md5 one.

Maybe the Auth::getSalt shouldn't be called at all in the compare  
password case.