mirror of
https://github.com/open-webui/open-webui.git
synced 2026-03-22 14:13:08 -05:00
LDAP auth should not save user password #2744
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @morgan55555 on GitHub (Nov 21, 2024).
Feature Request
Is your feature request related to a problem? Please describe.
LDAP auth now is not secure (password hashes can be leaked), and it will be unsuccessfull, if user changed LDAP password.
Describe the solution you'd like
Authenticate user like by trusted header, after verifying domain credentials.
If user not exists, generate random password like in trusted header auth.
@morgan55555 commented on GitHub (Nov 21, 2024):
https://github.com/open-webui/open-webui/pull/7162