Crowd stores LDAP directory password as plaintext in backup file

[Jan Wittorf]

Hi,

I enabled the "Schedule Backup" function and as I had a look inside the backup file I found that the ldap.password is stored in plaintext.

Is this correct? Are there any options to encrypt this password?

[JohnA · Accepted solution]

Hi Jan,

I'm sorry to say that is correct and at the moment there isn't an option to encrypt all passwords in the system. We do have an open feature request to ask that all Crowd passwords are encrypted so I would recommend that you watch/vote/comment on that issue to encourage our developers to prioritise its implementation: https://jira.atlassian.com/browse/CWD-1876

All the best,
John

[Jan Wittorf]

Ok, thanks