[LDAP-13] - Don't hash password values

Tirasa · Jun 24, 2014 · 07c06f1 · 07c06f1
1 parent eb5a9a4
commit 07c06f1
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/main/java/org/connid/bundles/ldap/commons/LdapModifyOperation.java b/src/main/java/org/connid/bundles/ldap/commons/LdapModifyOperation.java
@@ -76,6 +76,14 @@ protected final void hashPassword(final Attribute passwordAttr, final String ent
     }
 
     private String hashBytes(final byte[] plain, final String algorithm, final long randSeed) {
+        String plainPassword = new String(plain);
+        if (plainPassword != null && plainPassword.startsWith("{")) {
+            String digest = plainPassword.substring(1, plainPassword.indexOf('}'));
+            if (digest != null && algorithm.equalsIgnoreCase(digest)) {
+                return plainPassword;
+            }
+        }
+
         MessageDigest digest = null;
         try {
             if (algorithm.equalsIgnoreCase("SSHA") || algorithm.equalsIgnoreCase("SHA")) {