Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Request Administrator's Credentials adhoc #21

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Request Administrator's Credentials adhoc #21

wants to merge 2 commits into from

Commits on Sep 24, 2020

  1. Setting bind user in configuration is not safe in some deployments, 

    as this user should have permissions to modify the following attributes
in LDAP:
* userPassword
* pwdReset
* pwdAccountLockedTime

For that reason, the `always_authenticate_admin` variable has been introduced
in `config.inc.php`. When set to true, input fields for administrator's username
and password appear in `Reset Password` and `Lock/Unlock Account` forms.
When user submits one of this form, then `ldap_bidndn` and `ldap_bindpw` are
taken from the respective `POST` variables, overwriting any value they have
in `config.inc.php` or `config.inc.local.php` files.
The default value of `always_authenticate_admin` is false, providing the
old functionality.
    @GeKasap
    GeKasap committed Sep 24, 2020
    Configuration menu
    Copy the full SHA
    cdf3182 View commit details
    Browse the repository at this point in the history

  2. Update lockaccount.php 

    Reset value of pwdAccountLockedTime back to administrative lock.
    @GeKasap
    GeKasap authored Sep 24, 2020
    Configuration menu
    Copy the full SHA
    f9dfe33 View commit details
    Browse the repository at this point in the history