aleksis/AlekSIS-Core
9
0
Fork 0
Code Issues 197 Pull requests 63 Projects Releases 14 Packages 1 Wiki Activity Actions

Set password of LDAP-logged-in user in database #2120

Merged
hansegucker merged 1 commit from feature/keep_local_password_ldap into master 2021-02-08 08:34:18 +01:00
Conversation 9 Commits 1 Files changed 2 +42 -1
nik commented 2021-02-07 22:57:31 +01:00
Owner
Copy link

Having a local password is needed to make changing passwords easier. In
order to catch password changes in a universal way and forward them to
backends (like LDAP, in this case), getting the old password first is
necessary to authenticate as that user to LDAP.

We buy the small insecurity of having a hash of the password in the
Django database in order to not require it to have global admin permissions
on the LDAP directory.

Advances #354 and #353

Having a local password is needed to make changing passwords easier. In order to catch password changes in a universal way and forward them to backends (like LDAP, in this case), getting the old password first is necessary to authenticate as that user to LDAP. We buy the small insecurity of having a hash of the password in the Django database in order to not require it to have global admin permissions on the LDAP directory. Advances #354 and #353
nik commented 2021-02-07 23:03:07 +01:00
Author
Owner
Copy link

added 1 commit

  • 953b630b - Fix docstring

Compare with previous version

added 1 commit <ul><li>953b630b - Fix docstring</li></ul> [Compare with previous version](/AlekSIS/official/AlekSIS-Core/-/merge_requests/475/diffs?diff_id=4683&start_sha=2cc9dc91f27c37e69a4cfd63968fb77ae2827f73)
tteichler commented 2021-02-08 00:28:49 +01:00
Owner
Copy link

marked this merge request as draft

marked this merge request as **draft**
nik commented 2021-02-08 00:42:53 +01:00
Author
Owner
Copy link

added 2 commits

  • 5dbc795a - Save user after setting password
  • bc34a808 - Fail early if LDAP fails authentication

Compare with previous version

added 2 commits <ul><li>5dbc795a - Save user after setting password</li><li>bc34a808 - Fail early if LDAP fails authentication</li></ul> [Compare with previous version](/AlekSIS/official/AlekSIS-Core/-/merge_requests/475/diffs?diff_id=4684&start_sha=953b630b6c4c6a13a75e1ad6b904d407decb24b8)
nik commented 2021-02-08 00:47:13 +01:00
Author
Owner
Copy link

added 1 commit

  • f92f9bbe - Set password of LDAP-logged-in user in database

Compare with previous version

added 1 commit <ul><li>f92f9bbe - Set password of LDAP-logged-in user in database</li></ul> [Compare with previous version](/AlekSIS/official/AlekSIS-Core/-/merge_requests/475/diffs?diff_id=4686&start_sha=bc34a8082cc1a8ffc0d9ec8a10f337f916e5a128)
nik commented 2021-02-08 00:47:36 +01:00
Author
Owner
Copy link

marked this merge request as ready

marked this merge request as **ready**
tteichler commented 2021-02-08 00:49:40 +01:00
Owner
Copy link

approved this merge request

approved this merge request
tteichler commented 2021-02-08 00:49:57 +01:00
Owner
Copy link

Tested successfully.

Tested successfully.
hansegucker commented 2021-02-08 08:34:13 +01:00
Owner
Copy link

mentioned in commit 7a12491dbf

mentioned in commit 7a12491dbf3b281d236db8f167214ff6f47b903c
tteichler approved these changes 2026-07-30 18:36:05 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
debdolph
Labels
Clear labels   
Security

   
TeX
Needs LaTeX template

  
auto-update
  
board
done

  
board
ready

  
board
todo

  
check
delete-eslint-rc-js

  
check
update-builddeps-package-json

  
check
update-eslint-rc-js

  
check
update-gitignore

  
check
update-merge-request-template

  
check
update-prettier-ignore

  
check
update-pyproject-toml

  
check
update-renovate-json

  
check
update-tox-ini

  
part
backend
 Backend (view code, models, logic, etc.)

  
part
ci

  
part
docs
 Issue or addition to the documentation

  
part
frontend
 Frontend (templates, etc.)

  
part
i18n
 Translation or internationalisation issue

  
part
non-technical
 Non-technical (policy, maintenance, etc.) issue or discussion

  
part
packaging
 Issue concerning the packaging of AlekSIS and components

  
prio
1
 Priority High

  
prio
2
 Priority Medium

  
prio
3
 Priority Low

  
release-mr-5.x
  
size
large

  
size
medium

  
size
small

  
source
customer
 Requested by a customer or affiliated user

  
source
customer::fsmw

  
source
customer::fss

  
source
customer::teckids

  
source
downstream
 Issue or merge request from other projects using AlekSIS or parts of it

  
type
breaking

  
type
bug
 Bug

  
type
feature
 New feature

  
type
refactoring

  
workflow
blocked
 Issue is blocked by another issue

  
workflow
confirmed
 The bug is reproducible and will be fixed

  
workflow
current-todo

  
workflow
discussing
 Needs to be discussed before implementation

  
workflow
new-app
 Requires new AlekSIS app, which has to be created

  
workflow
wontfix
 The bug is not reproducible or the feature was decided against

No labels
Security
TeX
auto-update
board
done
board
ready
board
todo
check
delete-eslint-rc-js
check
update-builddeps-package-json
check
update-eslint-rc-js
check
update-gitignore
check
update-merge-request-template
check
update-prettier-ignore
check
update-pyproject-toml
check
update-renovate-json
check
update-tox-ini
part
backend
part
ci
part
docs
part
frontend
part
i18n
part
non-technical
part
packaging
prio
1
prio
2
prio
3
release-mr-5.x
size
large
size
medium
size
small
source
customer
source
customer::fsmw
source
customer::fss
source
customer::teckids
source
downstream
type
breaking
type
bug
type
feature
type
refactoring
workflow
blocked
workflow
confirmed
workflow
current-todo
workflow
discussing
workflow
new-app
workflow
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aleksis/AlekSIS-Core!2120
No description provided.