> {SSHA}0TT388zsWzHKtMEpIU/8/W68egchNEWp
> clear text: test123
>
> Verify works, bind does not.
Some investigations :
When decoding this password (base64) it is 24 bytes long: 20 byte the
SHA-1 hash of the password and 4 byte the salt.
slappasswd creates SSHA password with 4 byte salt.
Studio creates SSHA passwords with 8 byte salt
ApacheDS bind operation only works with a 8 byte salt.
The Studio veryify operation works with both.
I haven't found a definite receipe how many byte of salt a SSHA password
should contain. Any reference would be welcome.
Kind Regards,
Stefan
