Project

General

Profile

Bug #38998

Do not expose AD or LDAP passwords in new UI

Added by Andrew Walker over 2 years ago. Updated over 2 years ago.

Status:
Done
Priority:
No priority
Assignee:
-
Category:
GUI (new)
Target version:
11.2-BETA2
Seen in:
11.2-BETA1
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

I can expose my directory service account password by inspecting the webui element and changing the type from "password" to "text". legacy UI doesn't do this.

Associated revisions

Revision 63004345 (diff)
Added by Erin Clark over 2 years ago

Don't expose AD and LDAP passwords Ticket: #38998

History

#1 Updated by Dru Lavigne over 2 years ago

  • Assignee changed from Release Council to Anonymous
  • Target version changed from Backlog to 11.2-BETA2

#4 Updated by Anonymous over 2 years ago

  • Status changed from Unscreened to In Progress

I have a PR that should fix this but I do not have AD or LDAP currently setup on either of my boxen, could you possibly show me a box to test this on?

https://github.com/freenas/webui/pull/1025

#5 Updated by Anonymous over 2 years ago

  • Status changed from In Progress to Ready for Testing

#6 Updated by Dru Lavigne over 2 years ago

  • Subject changed from Account credentials exposed in new UI for directory services -> active directory to Do not expose AD or LDAP passwords in new UI
  • Private changed from Yes to No
  • Needs Doc changed from Yes to No
  • Needs Merging changed from Yes to No

#7 Updated by Bonnie Follweiler over 2 years ago

  • Status changed from Ready for Testing to Passed Testing
  • Needs QA changed from Yes to No

Test passed in FreeNAS-11.2-MASTER-201807260859
(Build Date: Jul 26, 2018 12:8)

#8 Updated by Dru Lavigne over 2 years ago

  • Status changed from Passed Testing to Done

Also available in: Atom PDF