search

goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.12k stars 874 forks source link

Does disabling LDAP password storage remove already saved passwords ? #9748

Open tograss opened 4 months ago

tograss commented 4 months ago

In 2024.4 a feature was introduced to disable password hashing in authentik. I wonder if this will "clear" already hashed passwords and really force users to be always validated against the ldap server? From looking at the commits this appears not to be the case. But I might be wrong here.

BeryJu commented 3 weeks ago

enabling this setting does not remove existing passwords in authentik, however you can change the password stage to only use the LDAP backend which will not use the passwords in authentik