Password reset changes LDAP bind password #34

New issue

Closed

opened 2021-09-21 23:40:20 +02:00 by debdolph · 7 comments

debdolph commented

2021-09-21 23:40:20 +02:00

(Migrated from edugit.org)

The 'password reset' function on the login page changes the password of the configured bind dn.

debdolph commented

2021-09-21 23:40:20 +02:00

(Migrated from edugit.org)

moved from AlekSIS-Core#508

nik commented

2021-09-24 16:38:33 +02:00

(Migrated from edugit.org)

changed title from Password reset changes {-ldap-} bind password to Password reset changes {+LDAP+} bind password

changed title from **Password reset changes {-ldap-} bind password** to **Password reset changes {+LDAP+} bind password**

nik commented

2021-09-25 21:55:15 +02:00

(Migrated from edugit.org)

The 'password reset' function on the login page changes the password of the configured bind dn.

We need to document a bit more detail on when this happens, and how to
reproduce it.

> The 'password reset' function on the login page changes the password of the configured bind dn. We need to document a bit more detail on when this happens, and how to reproduce it.

nik commented

2021-09-28 00:14:30 +02:00

(Migrated from edugit.org)

This happens when we reset the password of a native Django user that is not linked to an LDAP user, because such a user will have an empty DN and calling the Password Change Extended Operation with an empty DN changes the credentials of the current bind user.

nik commented

2021-09-28 00:14:53 +02:00

(Migrated from edugit.org)

created merge request !138 to address this issue