In the LDAP authentication sources set up for LDAP, it shows the saved Manager password in cleartext on the form. Wouldn't it be a good idea to not show it at all? The one editing the form should know it already, but to prevent trouble I'd prefer to know that no one will ever see the password again.
Similarly when typing in the password there, can it also be hidden or shown as * instead?
LDAP Manager password in cleartext...
Moderators: jmacgreg, michael, jheckman, barbarah, btbell, bdgregg, asmecher
Forum rules
Developer Resources:
Documentation: The OJS Technical Reference and the OJS API Reference are both available from the OJS Documentation page.
Git: You can access our public Git Repository here. Comprehensive Git usage instructions are available on the wiki.
Bugzilla: You can access our Bugzilla report tracker here.
Search: You can use our Google Custom Search to search across our main website, the support forum, and Bugzilla.
Questions and discussion are welcome, but if you have a workflow or usability question you should probably post to the OJS Editorial Support and Discussion subforum; if you have a technical support question, try the OJS Technical Support subforum.
Developer Resources:
Documentation: The OJS Technical Reference and the OJS API Reference are both available from the OJS Documentation page.
Git: You can access our public Git Repository here. Comprehensive Git usage instructions are available on the wiki.
Bugzilla: You can access our Bugzilla report tracker here.
Search: You can use our Google Custom Search to search across our main website, the support forum, and Bugzilla.
Questions and discussion are welcome, but if you have a workflow or usability question you should probably post to the OJS Editorial Support and Discussion subforum; if you have a technical support question, try the OJS Technical Support subforum.
2 posts
• Page 1 of 1
LDAP Manager password in cleartext...
by spatialguru » Wed Aug 08, 2007 11:12 am
- spatialguru
- Posts: 112
- Joined: Mon Jun 25, 2007 1:23 pm
- Location: British Columbia, Canada
Re: LDAP Manager password in cleartext...
by asmecher » Wed Aug 08, 2007 2:17 pm
Hi spatialguru,
Agreed -- passwords should never be echoed back to the browser. This isn't a high priority fix for us, as the LDAP configuration form is not a regularly-used page, but I've created a Bugzilla entry for a future release; see http://pkp.sfu.ca/bugzilla/show_bug.cgi?id=2971.
Regards,
Alec Smecher
Public Knowledge Project Team
Agreed -- passwords should never be echoed back to the browser. This isn't a high priority fix for us, as the LDAP configuration form is not a regularly-used page, but I've created a Bugzilla entry for a future release; see http://pkp.sfu.ca/bugzilla/show_bug.cgi?id=2971.
Regards,
Alec Smecher
Public Knowledge Project Team
- asmecher
- Posts: 5768
- Joined: Wed Aug 10, 2005 12:56 pm
2 posts
• Page 1 of 1
Who is online
Users browsing this forum: Google [Bot] and 2 guests