goauthentik / goauthentik/authentik
LDAP do-not-store-internal-password still writes the hash
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 651
Description
## What
LDAP “do not store internal password”: password is still written on change, and it is unclear whether disabling storage removes already-saved hashes.
## Want
- LDAP “do not store internal password”: password is still written on change,
- It is unclear whether disabling storage removes already-saved hashes
## Ideas this came from
- [#9518 LDAP source: internal password is written after password change (without "update internal password on login")](https://github.com/goauthentik/authentik/issues/9518) — With the new option "update internal password on login" (passwordloginupdateinternalpassword) disabled, I expected, that passwords are not written to the databa
- [#9748 Does disabling LDAP password storage remove already saved passwords ?](https://github.com/goauthentik/authentik/issues/9748) — In 2024.4 a feature was introduced to disable password hashing in authentik. I wonder if this will "clear" already hashed passwords and really force users to be
Contributor guide
Assessment
This issue has not been assessed yet.