Forum

LDAP Configuration ...
 
Notifications
Retirer tout

LDAP Configuration - Encrypted password

2 Posts
2 Utilisateurs
0 Reactions
1,767 Vu
(@support_infogerance)
Posts: 8
Active Member
Début du sujet
 
[#7618]

Hello,
We are running projeqtor using a custom docker image.
Our ldap bind password is in a vault, read at start by our K8S vault agent injector and set it as env var

PJT_LDAP_SEARCH_PASS

After that, our parameters.php contains :

$paramLdap_search_pass = getenv('PJT_LDAP_SEARCH_PASS');
Since 9.2.0, the LDAP search password is stored in database, and encrypted.
In 

model/UserMain.php code is now :

$paramLdap_search_pass=decryptPwd(Parameter::getGlobalParameter('paramLdap_search_pass'));

So our unencrypted password is decrypt, and our LDAP connection is broken.

Can we have a workaround other than modify

$paramLdap_search_pass=decryptPwd(Parameter::getGlobalParameter('paramLdap_search_pass')); in $paramLdap_search_pass=Parameter::getGlobalParameter('paramLdap_search_pass');

Thanks in advance,
Best Regards
 


 
Posté : 6 Juil PM 20:077
(@babynus)
Posts: 14952
Membre Admin
 

Hi,

workaround will be included in V.9.2.2
You'll be able to use unencrypted password in defined in parameters.php in $paramLdap_search_pass

We've also fixed issue for migration from before V9.2.0 : administrateur could not connect through LDAP to finish the migration
 


 
Posté : 9 Juil PM 18:077
Share:
Retour en haut