Foren

LDAP - encrypt password in portletprefernces table

thumbnail
Igor Beslic, geändert vor 15 Jahren.

LDAP - encrypt password in portletprefernces table

Junior Member Beiträge: 38 Beitrittsdatum: 03.08.06 Neueste Beiträge
After configuring LDAP connection in Enterprise Admin>Settings>Authentication>LDAP, entered Credentials could be obtained by accessing right LIFERAY_PORTALs PORTLET row in PORTLETPREFERENCES table:

credentials are saved in node:
<preference>
<name>ldap.security.credentials</name>
<value>UNENCRYPTED</value>
</preference>


Not sure should I set some portal property to avoid this but this way I obtained our Network Admin pass.

I't would be nice if this value is encrypted by default like passwords in User_ table.