deon/phpldapadmin
1
0
Fork 0
Code Issues 36 Pull Requests Packages Projects Releases Wiki Activity

Default Password Encryption of clear - should be SSHA #36

New Issue
Open
opened 2015-09-25 04:57:50 +00:00 by deon · 1 comment
deon commented 2015-09-25 04:57:50 +00:00 (Migrated from gitlab.dege.au)
Copy Link

Not sure if this exists yet.

When creating a new LDAP user, the default password setting/encryption is CLEAR?????

This is a problem, for example, When using Softerra's LDAP browser, anyone is able to view the password, without even authenticating, in plain text. I do not think this is a good practice, at least for the default.

I reccomend SSHA, and as the Default. It will work with Almost any Linux Distro.

My Specs:
CentOS 6.4
PHPLDAPAdmin 1.2.3
OpenLDAP: slapd 2.4.23

Not sure if this exists yet. When creating a new LDAP user, the default password setting/encryption is CLEAR????? This is a problem, for example, When using Softerra's LDAP browser, anyone is able to view the password, without even authenticating, in plain text. I do not think this is a good practice, at least for the default. I reccomend SSHA, and as the Default. It will work with Almost any Linux Distro. My Specs: CentOS 6.4 PHPLDAPAdmin 1.2.3 OpenLDAP: slapd 2.4.23
deon commented 2015-09-25 04:58:04 +00:00 (Migrated from gitlab.dege.au)
Copy Link

Login to PHPLA --> Create Child Entry --> Create Generic User Account -->

to the right of the two password lines, the default is clear, and would be much better if it was SSHA

Login to PHPLA --> Create Child Entry --> Create Generic User Account --> to the right of the two password lines, the default is clear, and would be much better if it was SSHA
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: deon/phpldapadmin#36
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?