Combination View Flat View Tree View
Threads [ Previous | Next ]
Igor Beslic
LDAP - encrypt password in portletprefernces table
March 20, 2009 5:41 AM
Answer

Igor Beslic

Rank: Junior Member

Posts: 39

Join Date: August 3, 2006

Recent Posts

After configuring LDAP connection in Enterprise Admin>Settings>Authentication>LDAP, entered Credentials could be obtained by accessing right LIFERAY_PORTALs PORTLET row in PORTLETPREFERENCES table:

credentials are saved in node:
1<preference>
2<name>ldap.security.credentials</name>
3<value>UNENCRYPTED</value>
4</preference>


Not sure should I set some portal property to avoid this but this way I obtained our Network Admin pass.

I't would be nice if this value is encrypted by default like passwords in User_ table.