search

hlavki / g-suite-identity-sync

G Suite to LDAP identity synchronizer
Apache License 2.0
128 stars 29 forks source link

Add LDAP userPassword Encryption #64

Closed muhx closed 4 years ago

muhx commented 4 years ago

Currently userPassword stored the value as a plaintext, for some reason it's better to store the password encrypted. Worked and tested, on Grafana with LDAP Auth and Keycloak. Sample value

Screen Shot 2020-05-13 at 14 49 10
hlavki commented 4 years ago

Hi @lesmono, thanks for pull request, but this is out of scope of this project. For password encryption is responsible LDAP server. For example if you use openLDAP, it's relatively easy to configure it. http://xacmlinfo.org/2015/06/25/enable-hash-passwords-in-openldap/

I use it for all our openLDAP Installations.

muhx commented 4 years ago

Ok man, no worries, you can ignore this. 👍