Project

General

Profile

Actions
Copy link

Bug #27200

open

Add a global warning and alert banner in user management with unsafe hashes

Added by Clark ANDRIANASOLO 23 days ago. Updated 2 days ago.

Status:
Pending release
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Web - UI & UX
Target version:
8.2.8
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
UX impact:
User visibility:
First impressions of Rudder
Effort required:
Small
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:
No

Description

When allowing unsafe hashes for user passwords (unsafe-hashes="true" added in #24729), users are able to login with SHA/MD5.
But since #27128 those hashes are no longer supported (in upcoming 9.0 version).

So we need a visible alert banner in the user management page when the option is still enabled, and a warning in the "User management" menu

Files

clipboard-202507091500-vdzkd.png (88.2 KB) clipboard-202507091500-vdzkd.png François ARMAND, 2025-07-09 15:00

Subtasks 3 (0 open — 3 closed)

Bug #27234: Upmerge of user API definition breaks with Scala 3ReleasedFrançois ARMANDActions
Bug #27236: Warning for unsafe hashes is not relevant in 9.0ReleasedFrançois ARMANDActions
Bug #27261: Alert banner has missing text for user passwords documentation ReleasedFrançois ARMANDActions

Related issues 2 (0 open — 2 closed)

Related to Rudder - Architecture #24729: Allow using a different password hash algorithm for each local userReleasedAlexis MoussetActions
Related to Rudder - Architecture #27128: Drop support for legacy password hash algorithmsReleasedFrançois ARMANDActions
Actions
Copy link

Also available in: Atom PDF