I have trouble doing SSHA... I've found a Java program from Netscape
(pwdSHA) that generates SSHA, but its result is not the same as those stored
in SunOne directory server 5.2. It seems to me that the program I have is
correct, it's just it is not applying the salt in the same way as SunOne
Directory Server 5.2.

Details:

I have to implement password policy, and one of the requirement is to check
if the new password is the same as the previous five.

The directory stores the previous passwords in their SSHA'ed format. So to
make sure the new password is not the same, I'll have to SSHA the new
password, and compare it with the values stored.

However I don't seem to be able to generate the same value from my program
as SunOne Directory Server 5.2.

I've searched in Sun's forum, and found there're a few posts about it, but
with no clear answers.

Besides the Java Code I found from Netscape, I've also write up one
myself... and the result from my program and the one from Netscape match -
which is, different from SunOne Directory server.

Can anyone help? Is there a documentation of how SunOne Directory Server
performs SSHA?