Actions
Bug #27200
open
Add a global warning and alert banner in user management with unsafe hashes
Pull Request:
Severity:
UX impact:
User visibility:
First impressions of Rudder
Effort required:
Small
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:
No
Description
When allowing unsafe hashes for user passwords (unsafe-hashes="true" added in #24729), users are able to login with SHA/MD5.
But since #27128 those hashes are no longer supported (in upcoming 9.0 version).
So we need a visible alert banner in the user management page when the option is still enabled, and a warning in the "User management" menu
Files
Updated by Clark ANDRIANASOLO 22 days ago
- Related to Architecture #24729: Allow using a different password hash algorithm for each local user added
- Related to Architecture #27128: Drop support for legacy password hash algorithms added
Updated by Clark ANDRIANASOLO 22 days ago
- Status changed from New to In progress
Updated by Clark ANDRIANASOLO 22 days ago
- Status changed from In progress to Pending technical review
- Assignee changed from Clark ANDRIANASOLO to Alexis Mousset
- Pull Request set to https://github.com/Normation/rudder/pull/6493
Updated by Clark ANDRIANASOLO 18 days ago
- Status changed from Pending technical review to Pending release
Applied in changeset rudder|8bd96b63568e6cc7667f0c2cf9f8e06fb94e344f.
Updated by François ARMAND 16 days ago
- File clipboard-202507091500-vdzkd.png clipboard-202507091500-vdzkd.png added
- Fix check changed from To do to Checked
Updated by Félix DALLIDET 8 days ago
This bug has been fixed in Rudder 8.2.8 and 8.3.3 which were released today.
Actions