Generate a valid LDAP SSHA

ssha.py

#!/usr/bin/python3

import getpass, sys, hashlib, os, base64

def makeSecret(password):
    password = str(password).encode('utf-8')
    salt = os.urandom(4)
    h = hashlib.sha1(password)
    h.update(salt)
    return "{ssha}" + (base64.b64encode(h.digest() + salt)).decode('utf-8')

def askPassword():
    pwd1 = getpass.getpass()
    pwd2 = getpass.getpass("Again:")
    if pwd1 != pwd2:
        print("Password mismatch")
        sys.exit(1)
    return makeSecret(pwd1)

if __name__ == '__main__':
    print(askPassword())