LDAP auth should not save user password #2744

Closed
opened 2025-11-11 15:13:28 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @morgan55555 on GitHub (Nov 21, 2024).

Feature Request

Is your feature request related to a problem? Please describe.
LDAP auth now is not secure (password hashes can be leaked), and it will be unsuccessfull, if user changed LDAP password.

Describe the solution you'd like
Authenticate user like by trusted header, after verifying domain credentials.
If user not exists, generate random password like in trusted header auth.

Originally created by @morgan55555 on GitHub (Nov 21, 2024). # Feature Request **Is your feature request related to a problem? Please describe.** LDAP auth now is not secure (password hashes can be leaked), and it will be unsuccessfull, if user changed LDAP password. **Describe the solution you'd like** Authenticate user like by trusted header, after verifying domain credentials. If user not exists, generate random password like in trusted header auth.
Author
Owner

@morgan55555 commented on GitHub (Nov 21, 2024):

https://github.com/open-webui/open-webui/pull/7162

@morgan55555 commented on GitHub (Nov 21, 2024): https://github.com/open-webui/open-webui/pull/7162
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#2744