deon/phpldapadmin
1
0
Fork 0
Code Issues 31 Pull Requests Actions Packages Projects Releases Wiki Activity

Default Password Encryption of clear - should be SSHA #36

New Issue
Closed
opened 2015-09-25 04:57:50 +00:00 by deon · 1 comment
deon commented 2015-09-25 04:57:50 +00:00 (Migrated from gitlab.dege.au)
Copy Link

Not sure if this exists yet.

When creating a new LDAP user, the default password setting/encryption is CLEAR?????

This is a problem, for example, When using Softerra's LDAP browser, anyone is able to view the password, without even authenticating, in plain text. I do not think this is a good practice, at least for the default.

I reccomend SSHA, and as the Default. It will work with Almost any Linux Distro.

My Specs:
CentOS 6.4
PHPLDAPAdmin 1.2.3
OpenLDAP: slapd 2.4.23

Not sure if this exists yet. When creating a new LDAP user, the default password setting/encryption is CLEAR????? This is a problem, for example, When using Softerra's LDAP browser, anyone is able to view the password, without even authenticating, in plain text. I do not think this is a good practice, at least for the default. I reccomend SSHA, and as the Default. It will work with Almost any Linux Distro. My Specs: CentOS 6.4 PHPLDAPAdmin 1.2.3 OpenLDAP: slapd 2.4.23
deon commented 2015-09-25 04:58:04 +00:00 (Migrated from gitlab.dege.au)
Copy Link

Login to PHPLA --> Create Child Entry --> Create Generic User Account -->

to the right of the two password lines, the default is clear, and would be much better if it was SSHA

Login to PHPLA --> Create Child Entry --> Create Generic User Account --> to the right of the two password lines, the default is clear, and would be much better if it was SSHA
deon closed this issue 2025-02-25 12:50:58 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
deon
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: deon/phpldapadmin#36
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?