Crowd stores LDAP directory password as plaintext in backup file

Hi,

I enabled the "Schedule Backup" function and as I had a look inside the backup file I found that the ldap.password is stored in plaintext.

Is this correct? Are there any options to encrypt this password?

2 answers

1 accepted

Accepted Answer
1 vote

Hi Jan,

I'm sorry to say that is correct and at the moment there isn't an option to encrypt all passwords in the system. We do have an open feature request to ask that all Crowd passwords are encrypted so I would recommend that you watch/vote/comment on that issue to encourage our developers to prioritise its implementation: https://jira.atlassian.com/browse/CWD-1876

All the best,
John

Ok, thanks

Suggest an answer

Log in or Sign up to answer
Community showcase
Published 11 hours ago in Jira Ops

Jira Ops Early Access Program Update #1: Announcing our next feature and a new integration

Thanks for signing up for Jira Ops! I’m Matt Ryall, leader for the Jira Ops product team at Atlassian. Since this is a brand new product, we’ll be delivering improvements quickly and sharing updates...

158 views 0 5
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you