Project

General

Profile

Actions
Copy link

Bug #27200

open

Add a global warning and alert banner in user management with unsafe hashes

Added by Clark ANDRIANASOLO 1 day ago. Updated 1 day ago.

Status:
Pending technical review
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Web - UI & UX
Target version:
8.2.8
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
UX impact:
User visibility:
First impressions of Rudder
Effort required:
Small
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

When allowing unsafe hashes for user passwords (unsafe-hashes="true" added in #24729), users are able to login with SHA/MD5.
But since #27128 those hashes are no longer supported (in upcoming 9.0 version).

So we need a visible alert banner in the user management page when the option is still enabled, and a warning in the "User management" menu

Related issues 2 (1 open — 1 closed)

Related to Rudder - Architecture #24729: Allow using a different password hash algorithm for each local userReleasedAlexis MoussetActions
Related to Rudder - Architecture #27128: Drop support for legacy password hash algorithmsPending releaseFrançois ARMANDActions
Actions
Copy link
 #1

Updated by Clark ANDRIANASOLO 1 day ago

  • Related to Architecture #24729: Allow using a different password hash algorithm for each local user added
  • Related to Architecture #27128: Drop support for legacy password hash algorithms added
Actions
Copy link
 #2

Updated by Clark ANDRIANASOLO 1 day ago

  • Status changed from New to In progress
Actions
Copy link
 #3

Updated by Clark ANDRIANASOLO 1 day ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Clark ANDRIANASOLO to Alexis Mousset
  • Pull Request set to https://github.com/Normation/rudder/pull/6493
Actions
Copy link

Also available in: Atom PDF