Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

External password to prevail and re/set local password #253

Open
narcisgarcia opened this issue May 30, 2024 · 1 comment
Open

External password to prevail and re/set local password #253

narcisgarcia opened this issue May 30, 2024 · 1 comment
Labels
0. Needs triage enhancement New feature or request

Comments

@narcisgarcia
Copy link

narcisgarcia commented May 30, 2024

On this scenario from same Internet origin:

  1. External (DAV) login is made authenticating with IMAP account. Account is automatically created.
  2. User signs in web interface later. Changes its Nextcloud password.
  3. External (DAV) login is made later authenticating with IMAP. After some tries sign in is accepted (this takes a while).
  4. Web login page says "We have detected multiple invalid login attempts from your IP. Therefore your next login is throttled up to 30 seconds."

"External user authentication" is enabled by site administrator to trust external accounts as master directory of this sort of users. This necessarily implies external password (when verified) prevails over any local one.
Then on any difference between user's specified password (when verified) and Nextcloud stored password, external verified one should prevail as the master/trusted one, and this should imply to re/set local (Nextcloud) password with this authenticated one.

In the meanwhile, DAV clients become slow to synchronize because need to retry several times the login.

@narcisgarcia narcisgarcia added 0. Needs triage enhancement New feature or request labels May 30, 2024
@narcisgarcia
Copy link
Author

narcisgarcia commented May 30, 2024

Now I've realized a simpler scenario where Nextcloud could log authentication failures and require DAV client to retry:
When external user changes password on external directory (eg. IMAP server), and later configures a new DAV client.

As some DAV client can have old password stored, I understand that if local authentication succeeds, then no external authentication must be checked. Only when local one fails external user could apply new password.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
0. Needs triage enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant