From 719a5e09d84c92b9d90a7a44e56b9194be73b5ee Mon Sep 17 00:00:00 2001
From: Luke Taylor <luke.taylor@springsource.com>
Date: Wed, 22 Jul 2009 16:11:24 +0000
Subject: [PATCH] SEC-1205: Added comment to Javadoc for
 PasswordComparisonAuthenticator to indicate that it won't work with SSHA
 passwords

---
 .../ldap/authentication/PasswordComparisonAuthenticator.java    | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java b/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java
index dada87b391..c6fa530e14 100644
--- a/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java
+++ b/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java
@@ -38,6 +38,8 @@ import org.springframework.util.Assert;
  * <p>
  * If passwords are stored in digest form in the repository, then a suitable {@link PasswordEncoder}
  * implementation must be supplied. By default, passwords are encoded using the {@link LdapShaPasswordEncoder}.
+ * Note that compare operations will not work if salted-SHA (SSHA) passwords are used, as it is not possible to
+ * know the salt value which is a random byte sequence generated by the directory.
  *
  * @author Luke Taylor
  * @version $Id$