diff --git a/daemons/ganeti-rapi b/daemons/ganeti-rapi
index fc5bf12a96743421e199267096625a8b4196fd4f..592853709cb89e30c743cc90c53d9270aec9b3e4 100755
--- a/daemons/ganeti-rapi
+++ b/daemons/ganeti-rapi
@@ -139,7 +139,8 @@ class RemoteApiHttpServer(http.auth.HttpServerRequestAuthentication,
     valid_user = False
     if self._users:
       user = self._users.get(username, None)
-      if user and user.password == password:
+      if user and self.VerifyBasicAuthPassword(req, username, password,
+                                               user.password):
         valid_user = True
 
     if not valid_user: