Software / code / prosody-modules
Annotate
mod_lib_ldap/dev/slapd.conf @ 6191:94399ad6b5ab
mod_invites_register_api: Use set_password() for password resets
Previously the code relied on the (weird) behaviour of create_user(), which
would update the password for a user account if it already existed. This has
several issues, and we plan to deprecate this behaviour of create_user().
The larger issue is that this route does not trigger the user-password-changed
event, which can be a security problem. For example, it did not disconnect
existing user sessions (this occurs in mod_c2s in response to the event).
Switching to set_password() is the right thing to do.
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Thu, 06 Feb 2025 10:13:39 +0000 |
| parent | 822:1f45cef9e5c7 |
| rev | line source |
|---|---|
| 809 | 1 include /etc/openldap/schema/core.schema |
| 2 # I needed the following two schema definitions for posixGroup; if you don't | |
| 3 # need it, don't include them | |
| 4 include /etc/openldap/schema/cosine.schema | |
| 5 include /etc/openldap/schema/nis.schema | |
|
822
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
6 # needed for inetOrgPerson so I can test jpegPhoto |
|
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
7 include /etc/openldap/schema/inetorgperson.schema |
| 809 | 8 |
| 9 pidfile /var/run/openldap/slapd.pid | |
| 10 argsfile /var/run/openldap/slapd.args | |
| 11 database bdb | |
| 12 suffix "dc=example,dc=com" | |
| 13 rootdn "cn=Manager,dc=example,dc=com" | |
| 14 rootpw prosody | |
| 15 directory /var/lib/openldap/openldap-data | |
| 16 index objectClass eq |
