Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SingleUser Plugin - Original Password? #151

Open
sonicnkt opened this issue Oct 10, 2019 · 1 comment
Open

SingleUser Plugin - Original Password? #151

sonicnkt opened this issue Oct 10, 2019 · 1 comment

Comments

@sonicnkt
Copy link

Hi,
is it possible to get the original password for scripting in the Event Notification state when using the singleUser Plugin.

I have authentication and Authorization against an LDAP Server, then i want all those users use a single local mandatory profile.
Until now this is working fine.

But i also want to use the original credentials used to authorize in a logon script of the user context to map some drives. But as far as i can see i can only get the original username.
I could work arround this by have the password stored somewhere in the authentication stage but this seems very insecure to me. Any idea if im missing something?

Thanks!

@MutonUfoAI
Copy link
Owner

http://mutonufoai.github.io/pgina/documentation/plugins/single_user.html
By using this plugin pGina is unable to verify a user during logon as shown here. Pgina can’t detect a loggin off session from this user nor if this user is already logged in and tries to unlock the user. As you can see the Username Modification Plugin runs in stage 3 while the above checks are done in stage 2. Also plugins registered for Notification Events won’t work properly.

It was a terrible idea from the original developers to add this plugin.
What you want leads to a disaster.
Let your users know the user you want to be used on this system, right now they can login anyway.
Problem solved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants