Get my SSHA ldap passwds?

Hi, I have plain-text passwords coming from a pix firewall for vpn authentication. I have SSHA hashed passwds stored in ldap. Can't I hash the passwds from the pix and compare 'em the SSHA passwds from ldap somehow? It works fine if I put plain text passwords in ldap. But I don't relish the thought of storing them plain text. Thanks, John