OJS OCS OMP OHS

You are viewing the PKP Support Forum | PKP Home Wiki



LDAP Manager password in cleartext...

OJS development discussion, enhancement requests, third-party patches and plug-ins.

Moderators: jmacgreg, btbell, michael, bdgregg, barbarah, asmecher

Forum rules
Developer Resources:

Documentation: The OJS Technical Reference and the OJS API Reference are both available from the OJS Documentation page.

Git: You can access our public Git Repository here. Comprehensive Git usage instructions are available on the wiki.

Bugzilla: You can access our Bugzilla report tracker here.

Search: You can use our Google Custom Search to search across our main website, the support forum, and Bugzilla.

Questions and discussion are welcome, but if you have a workflow or usability question you should probably post to the OJS Editorial Support and Discussion subforum; if you have a technical support question, try the OJS Technical Support subforum.

LDAP Manager password in cleartext...

Postby spatialguru » Wed Aug 08, 2007 11:12 am

In the LDAP authentication sources set up for LDAP, it shows the saved Manager password in cleartext on the form. Wouldn't it be a good idea to not show it at all? The one editing the form should know it already, but to prevent trouble I'd prefer to know that no one will ever see the password again.

Similarly when typing in the password there, can it also be hidden or shown as * instead?
spatialguru
 
Posts: 112
Joined: Mon Jun 25, 2007 1:23 pm
Location: British Columbia, Canada

Re: LDAP Manager password in cleartext...

Postby asmecher » Wed Aug 08, 2007 2:17 pm

Hi spatialguru,

Agreed -- passwords should never be echoed back to the browser. This isn't a high priority fix for us, as the LDAP configuration form is not a regularly-used page, but I've created a Bugzilla entry for a future release; see http://pkp.sfu.ca/bugzilla/show_bug.cgi?id=2971.

Regards,
Alec Smecher
Public Knowledge Project Team
asmecher
 
Posts: 9098
Joined: Wed Aug 10, 2005 12:56 pm


Return to OJS Development

Who is online

Users browsing this forum: No registered users and 4 guests