diff options
| -rw-r--r-- | CHANGELOG | 1 | ||||
| -rw-r--r-- | plugins/password/drivers/ldap.php | 2 |
2 files changed, 2 insertions, 1 deletions
@@ -50,6 +50,7 @@ CHANGELOG Roundcube Webmail - Fix page title when using search filter (#1490023) - Fix mbox files import - Fix setting flags on servers with no PERMANENTFLAGS response (#1490087) +- Fix regression in SHAA password generation in ldap driver of password plugin (#1490094) RELEASE 1.0.3 ------------- diff --git a/plugins/password/drivers/ldap.php b/plugins/password/drivers/ldap.php index acd968723..340dd29f8 100644 --- a/plugins/password/drivers/ldap.php +++ b/plugins/password/drivers/ldap.php @@ -277,7 +277,7 @@ class rcube_ldap_password if (function_exists('mhash') && function_exists('mhash_keygen_s2k')) { $salt = mhash_keygen_s2k(MHASH_SHA1, $password_clear, $salt, 4); - $password = mhash(MHASH_MD5, $password_clear . $salt); + $password = mhash(MHASH_SHA1, $password_clear . $salt); } else if (function_exists('sha1')) { $salt = substr(pack("H*", sha1($salt . $password_clear)), 0, 4); |