Skip to content
Snippets Groups Projects
  1. Feb 08, 2021
    • Nik | Klampfradler's avatar
      Set password of LDAP-logged-in user in database · bddfa9d2
      Nik | Klampfradler authored
      Having a local password is needed to make changing passwords easier. In
      order to catch password changes in a universal way and forward them to
      backends (like LDAP, in this case), getting the old password first is
      necessary to authenticate as that user to LDAP.
      
      We buy the small insecurity of having a hash of the password in the
      Django database in order to not require it to have global admin permissions
      on the LDAP directory.
      
      In addition, we fail early by raising PermissionDenied if LDAP cannot
      authenticate the user, so as to not allow logins with ghost users that
      were removed in LDAP or changed their password there.
      bddfa9d2
  2. Feb 07, 2021
  3. Feb 06, 2021
  4. Feb 03, 2021
  5. Jan 25, 2021
  6. Jan 24, 2021
  7. Jan 23, 2021
Loading