Solution found - Yes, the ofBiz version we are using is old and the
password hash hex encoding is indeed the older one with, ah, "custom",
hex encoding.
As an example for anyone who may in the future encounter this problem,
the password "ofbiz" looks like this with the old encoding:
47ca69ebb4bdc9ae0adec130880165d2cc05db1a
And this with standard SHA-1 encoding:
47B56994CBC2B6D10AA1BE30F70165ADB305A41A
The old code is in the HashCrypt.java file and the old version of the
function is called "getDigestHashOldFunnyHexEncode".
Thank you Scott!
And thank you Adam for answering the question about salting.
- Grant
