Default Password Encryption of clear - should be SSHA #36

New Issue

2015-09-25T04:57:50Z

deon commented

2015-09-25 04:57:50 +00:00

(Migrated from gitlab.dege.au)

Not sure if this exists yet.

When creating a new LDAP user, the default password setting/encryption is CLEAR?????

This is a problem, for example, When using Softerra's LDAP browser, anyone is able to view the password, without even authenticating, in plain text. I do not think this is a good practice, at least for the default.

I reccomend SSHA, and as the Default. It will work with Almost any Linux Distro.

My Specs:
CentOS 6.4
PHPLDAPAdmin 1.2.3
OpenLDAP: slapd 2.4.23

Not sure if this exists yet. When creating a new LDAP user, the default password setting/encryption is CLEAR????? This is a problem, for example, When using Softerra's LDAP browser, anyone is able to view the password, without even authenticating, in plain text. I do not think this is a good practice, at least for the default. I reccomend SSHA, and as the Default. It will work with Almost any Linux Distro. My Specs: CentOS 6.4 PHPLDAPAdmin 1.2.3 OpenLDAP: slapd 2.4.23

deon commented

2015-09-25 04:58:04 +00:00

(Migrated from gitlab.dege.au)

Login to PHPLA --> Create Child Entry --> Create Generic User Account -->

to the right of the two password lines, the default is clear, and would be much better if it was SSHA

Login to PHPLA --> Create Child Entry --> Create Generic User Account --> to the right of the two password lines, the default is clear, and would be much better if it was SSHA

Sign in to join this conversation.

No Label

No Milestone

No project

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: deon/phpldapadmin#36