Hello,
We are running projeqtor using a custom docker image.
Our ldap bind password is in a vault, read at start by our K8S vault agent injector and set it as env var
PJT_LDAP_SEARCH_PASS
After that, our parameters.php contains :
$paramLdap_search_pass = getenv('PJT_LDAP_SEARCH_PASS');
Since 9.2.0, the LDAP search password is stored in database, and encrypted.
In
model/UserMain.php code is now :
$paramLdap_search_pass=decryptPwd(Parameter::getGlobalParameter('paramLdap_search_pass'));
So our unencrypted password is decrypt, and our LDAP connection is broken.
Can we have a workaround other than modify
$paramLdap_search_pass=decryptPwd(Parameter::getGlobalParameter('paramLdap_search_pass')); in $paramLdap_search_pass=Parameter::getGlobalParameter('paramLdap_search_pass');
Thanks in advance,
Best Regards
Hi,
workaround will be included in V.9.2.2
You'll be able to use unencrypted password in defined in parameters.php in $paramLdap_search_pass
We've also fixed issue for migration from before V9.2.0 : administrateur could not connect through LDAP to finish the migration