goauthentik / goauthentik/authentik

LDAP do-not-store-internal-password still writes the hash

Open
#25,315 0 comments 0 reactions 1 assignee Claimed by @dewi-tik View on GitHub
enhancement enhancement/confirmed needs_documentation
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 2h
Merged PRs (30d)
651

Description

## What

LDAP “do not store internal password”: password is still written on change, and it is unclear whether disabling storage removes already-saved hashes.

## Want

- LDAP “do not store internal password”: password is still written on change,
- It is unclear whether disabling storage removes already-saved hashes

## Ideas this came from

- [#9518 LDAP source: internal password is written after password change (without "update internal password on login")](https://github.com/goauthentik/authentik/issues/9518) — With the new option "update internal password on login" (passwordloginupdateinternalpassword) disabled, I expected, that passwords are not written to the databa
- [#9748 Does disabling LDAP password storage remove already saved passwords ?](https://github.com/goauthentik/authentik/issues/9748) — In 2024.4 a feature was introduced to disable password hashing in authentik. I wonder if this will "clear" already hashed passwords and really force users to be

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.