--- Comment #93 from Chris Steipp <> ---
(In reply to Chris Steipp from comment #92)
> And since CentralAuth already lets the User object do the comparison, ignore
> my last comment. CentralAuth uses the new hashes just fine.

... except when CentralAuth unmerges accounts. If a user creates a new account
and CentralAuth gets the pbkdf2 hash, and later they are unmerged in
CentralAuth, they won't be able to login to any wikis where the password api
hasn't been deployed. So we do need the $wgPasswordDefault = 'B' for the week
while code is deployed to all wikis.

You are receiving this mail because:
You are on the CC list for the bug.
Wikibugs-l mailing list

Reply via email to