diff --git a/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java b/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java index dada87b391..c6fa530e14 100644 --- a/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java +++ b/ldap/src/main/java/org/springframework/security/ldap/authentication/PasswordComparisonAuthenticator.java @@ -38,6 +38,8 @@ import org.springframework.util.Assert; *

* If passwords are stored in digest form in the repository, then a suitable {@link PasswordEncoder} * implementation must be supplied. By default, passwords are encoded using the {@link LdapShaPasswordEncoder}. + * Note that compare operations will not work if salted-SHA (SSHA) passwords are used, as it is not possible to + * know the salt value which is a random byte sequence generated by the directory. * * @author Luke Taylor * @version $Id$