OTRS+AD. Password storage

D

Denis Minaev2013-04-16 11:17:33

Helpdesk

Denis Minaev, 2013-04-16 11:17:33

in the office they want to implement OTRS. One of the main requirements is integration with AD.
Climbed into the OTRS database. I found the login and pw links in the users table . An indiscreet question arises: - " In what form does OTRS store passwords (password hashes)"? Won't OTRS be a security hole. Breaking AD is one thing, but a web server with OTRS is quite another.

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

D

Dal, 2013-04-16
@Dal

Why does he keep them? He will climb with authorization in AD.

V

Vorchun, 2013-04-16
@Vorchun

Look, maybe you will get answers:
habrahabr.ru/post/125089/
otrs.ru/forum/viewtopic.php?f=6&t=31