Set password of LDAP-logged-in user in database

Having a local password is needed to make changing passwords easier. In order to catch password changes in a universal way and forward them to backends (like LDAP, in this case), getting the old password first is necessary to authenticate as that user to LDAP.

We buy the small insecurity of having a hash of the password in the Django database in order to not require it to have global admin permissions on the LDAP directory.

Advances #354 (closed) and #353 (closed)

added part::backend type::feature labels

added 1 commit

• 953b630b - Fix docstring

Compare with previous version

marked this merge request as draft

added 2 commits

• 5dbc795a - Save user after setting password
• bc34a808 - Fail early if LDAP fails authentication

Compare with previous version

added 1 commit

• f92f9bbe - Set password of LDAP-logged-in user in database

Compare with previous version

marked this merge request as ready

approved this merge request

Tested successfully.

mentioned in commit 7a12491d

merged