Hi cutethree, I'm having trouble reproducing the issue. I've just tested setting a hashed password (using the Python API) without issue. Google stores the password hash as expected and I can later log in with the password used to generate the original hash. At no point does google know this password, so it seems to be working as advertised. Can you provide a more detailed example of code to assist in troubleshooting?
I also validated that Google does not return a value if you ask for the hash function name after a user has been provisioned. Although confusing, I can see Google's reasoning in this case. It's reasonable to believe that all passwords should be hashed to disk in some form or another regardless of whether Google received them as plain text or a hash. On May 16, 12:19 pm, cutethree <[EMAIL PROTECTED]> wrote: > It's more like a bug from Google. > > I retrieved the Google testing account just created to take a closer > look. The retrieved field UserEntry.Login.HashFunction is null, which > means Google stores the password as SHA-1 hashed but it won't remember > the password hash is set true or not and just deal with the password > as plain text. > > On May 16, 3:02 pm, cutethree <[EMAIL PROTECTED]> wrote: > > > Hello, > > > I created the account using SHA-1 hashed password. I'm sure Google > > Provision API does checked the password to make sure it's SHA-1 hashed > > because when I manipulate the hashed string, it returns error saying > > the hashing diguest is invalid. If it's correct, Google takes it and > > created the account successfully. > > > After account creation, I login as the just created user to test. > > Google won't allow me to login using the original password and the > > "hashed string" logged me in. So Google doesn't deem the hashing > > string as a hashing or what? > > > Thanks, --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Apps APIs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/google-apps-apis?hl=en -~----------~----~----~----~------~----~------~--~---
