redbrick / useradm

useradm and Redbrick registration system
The Unlicense
4 stars 6 forks source link

LDAP: Password crypt #45

Closed RodolfoFerro closed 7 years ago

RodolfoFerro commented 7 years ago

Password crypt has to be DES until Solaris supports better methods crypted password gets sent by pam to ldap when checking authentication anyone can directly connect to ldap to try for correct passwords with no delay involved for incorrect passwords. This should be logged.

CSmartt commented 7 years ago

Redbrick no longer uses Solaris in production, legacy/irrelevant issue.