Force encryption type
Force encryption type
Allow the administrator to enforce an encryption type for all users in the directory. Default should be the strongest encryption available.
(from redmine: issue id 5271, created on 2016-12-02, closed on 2017-01-11)
- Changesets:
- Revision a97234d6 by Côme Chilliet on 2017-01-10T09:02:55.000Z:
Fixes #5271 Added a Password tab to dashboard listing used password methods- Revision 7686a0e5 by Côme Chilliet on 2017-01-10T09:03:29.000Z:
Fixes #5271 Added a Password tab to dashboard listing used password methods- Custom Fields:
- Bug in version: 1.0.17
Activity
I believe the current option sets a default for new passwords. This, new, option makes sure all passwords in the database uses the encryption scheme selected. This would mean passwords using a different encryption scheme from the one to be enforced, would have to be reentered.
An initial version of this feature, could be a tool informing administrator(s) of accounts using other encryption schemes than the default.
(from redmine: written on 2016-12-12)
By tbp on 2017-09-02T15:34:32 (imported from GitLab)
Tobias Balle-Petersen wrote:
I believe the current option sets a default for new passwords.
It does not only set a default it enforces it if you check «Force default hash», you can’t choose anything else.
This, new, option makes sure all passwords in the database uses the encryption scheme selected. This would mean passwords using a different encryption scheme from the one to be enforced, would have to be reentered.
An initial version of this feature, could be a tool informing administrator(s) of accounts using other encryption schemes than the default.
Yeah, for passwords imported or entered before the force option was checked, we may add some way of listing them. Maybe that could go in the dashboard.
(from redmine: written on 2016-12-12)
By Côme Chilliet on 2017-09-02T15:34:32 (imported from GitLab)
added Added label
By bmortier on 2018-09-26T19:40:26 (imported from GitLab)
