Re: [Mediawiki-l] Password hashes with or without salt

Mordur Ingólfsson wrote:

Dear list,

Hi, I just moved a Mediawiki from one Debian server to another. In the database that I imported from the previous server the user's password hashes looked like this:

:B:728d4f83:c0890522e6b9dfc8e3c55a45e5c05156

but now they look like this:

a4c520344c6ce5b3e2dfea3d43301a99.

And no authentication works.

I have found out that this has got to do with salting the hash, but I cannot seem to make Mediawiki use the salted kind of hashes, so my users are having to change their passwords, which is a nuisance.

Thanks,

Mordur Ingolfsson

Is the new server at a mediawiki version greater or equal to the old one? The first hash is on a newer format, and is always salted. The second one may be salted or not depending on $wgPasswordSalt