LDAP ToolBox Self Service Password - Redigeerimiste ajalugu

Imre: /* Misc */

2026-04-26T07:58:15Z

Misc

←Vanem redaktsioon		Redaktsioon: 26. aprill 2026, kell 10:58
217. rida:		217. rida:
	* https://github.com/ltb-project/self-service-password		* https://github.com/ltb-project/self-service-password
	* https://self-service-password.readthedocs.io/en/stable/		* https://self-service-password.readthedocs.io/en/stable/
−
−	===Misc===
−
−	<pre>
−	#!/bin/bash
−
−	# Use a wildcard to target your small files
−	FILES=( tekst-*.txt )
−
−	# 1. Generate MD5 hashes and extract only the hash part
−	# 2. Sort them and find unique values
−	UNIQUE_HASHES=$(md5sum "${FILES[@]}" \| awk '{print $1}' \| sort -u \| wc -l)
−
−	# An accountant's check: if unique hashes = 1, all files are the same.
−	if [ "$UNIQUE_HASHES" -eq 1 ]; then
−	echo "All ${#FILES[@]} files are identical."
−	else
−	echo "Files are DIFFERENT. Found $UNIQUE_HASHES unique versions."
−	fi
−	</pre>

Imre: /* 2026 aasta kevade märkused */

2026-04-26T07:57:15Z

2026 aasta kevade märkused

←Vanem redaktsioon		Redaktsioon: 26. aprill 2026, kell 10:57
204. rida:		204. rida:
	$captcha_class = "InternalCaptcha";		$captcha_class = "InternalCaptcha";
	</pre>		</pre>
		+
		+	kus
		+
		+	* parooli keerukusele nõuete kehtestamine
		+	* capthca kasutamine
		+	* versiooni info jms esitamise väljalülitamine
		+	* kasutusjuhule mitte-vajaliku funktsionaalsuse väljalülitamine

	===Kasulikud lisamaterjalid===		===Kasulikud lisamaterjalid===

Imre: /* 2026 aasta kevade märkused */

2026-04-23T16:29:14Z

2026 aasta kevade märkused

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 19:29
197. rida:		197. rida:
	$pwd_diff_login = true; // Don't allow password to contain the username		$pwd_diff_login = true; // Don't allow password to contain the username
	$pwd_forbidden_chars = ""; // Add specific bad chars if needed		$pwd_forbidden_chars = ""; // Add specific bad chars if needed
		+
		+	$display_footer = false;
		+	$use_ratelimit = true;
		+
		+	$use_captcha = true;
		+	$captcha_class = "InternalCaptcha";
	</pre>		</pre>

Imre – 23. aprill 2026, kell 12:53

2026-04-23T12:53:53Z

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 15:53
204. rida:		204. rida:
	* https://github.com/ltb-project/self-service-password		* https://github.com/ltb-project/self-service-password
	* https://self-service-password.readthedocs.io/en/stable/		* https://self-service-password.readthedocs.io/en/stable/
		+
		+	===Misc===
		+
		+	<pre>
		+	#!/bin/bash
		+
		+	# Use a wildcard to target your small files
		+	FILES=( tekst-*.txt )
		+
		+	# 1. Generate MD5 hashes and extract only the hash part
		+	# 2. Sort them and find unique values
		+	UNIQUE_HASHES=$(md5sum "${FILES[@]}" \| awk '{print $1}' \| sort -u \| wc -l)
		+
		+	# An accountant's check: if unique hashes = 1, all files are the same.
		+	if [ "$UNIQUE_HASHES" -eq 1 ]; then
		+	echo "All ${#FILES[@]} files are identical."
		+	else
		+	echo "Files are DIFFERENT. Found $UNIQUE_HASHES unique versions."
		+	fi
		+	</pre>

Imre: /* 2026 aasta kevade märkused */

2026-04-23T08:30:59Z

2026 aasta kevade märkused

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 11:30
153. rida:		153. rida:

	* TODO		* TODO
		+
		+	ning abiks võib olla
		+
		+	<pre>
		+	root@dh-post:~# docker exec -ti cn_tlb apt-get install ldap-utils
		+	</pre>

	ning		ning

Imre: /* 2026 aasta kevade märkused */

2026-04-23T08:29:38Z

2026 aasta kevade märkused

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 11:29
163. rida:		163. rida:
	$ldap_bindpw = "bindingparool";		$ldap_bindpw = "bindingparool";
	$ldap_base = "dc=sise,dc=moraal,dc=ee";		$ldap_base = "dc=sise,dc=moraal,dc=ee";
−	$ldap_login_attribute = "~~mailrandomvalue~~";	+	// $ldap_login_attribute = "uid";
−	$ldap_fullname_attribute = "cn";	+	// $ldap_fullname_attribute = "cn";
	// $ldap_filter = "(&(objectClass=person)($ldap_login_attribute={login}))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";		// $ldap_filter = "(&(objectClass=person)($ldap_login_attribute={login}))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";
	// $ldap_filter = "(&(objectClass=user)(sAMAccountName={login})(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";		// $ldap_filter = "(&(objectClass=user)(sAMAccountName={login})(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";

Imre: /* 2026 aasta kevade märkused */

2026-04-23T08:28:45Z

2026 aasta kevade märkused

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 11:28
153. rida:		153. rida:

	* TODO		* TODO
		+
		+	ning
		+
		+	<pre>
		+	# cat /srv/ltb/volume/var/www/conf/config.inc.local.php
		+	<?php // My SSP configuration
		+	$ldap_url = "ldap://192.168.10.125";
		+	$ldap_binddn = "cn=ltb_pwdchange,ou=Teenuskontod,dc=sise,dc=moraal,dc=ee";
		+	$ldap_bindpw = "bindingparool";
		+	$ldap_base = "dc=sise,dc=moraal,dc=ee";
		+	$ldap_login_attribute = "mailrandomvalue";
		+	$ldap_fullname_attribute = "cn";
		+	// $ldap_filter = "(&(objectClass=person)($ldap_login_attribute={login}))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";
		+	// $ldap_filter = "(&(objectClass=user)(sAMAccountName={login})(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";
		+	$ldap_filter = "(&(objectClass=user)(mail={login})(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";
		+	// $ldap_filter = "(&(objectClass=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(objectClass=computer)))";
		+	$ad_mode = true;
		+
		+	$keyphrase = "mysecretfraas;
		+	$debug = true;
		+	$show_help = false;
		+	$use_sms = false;
		+	$use_questions = false;
		+	$use_tokens = false;
		+
		+	// --- Complexity Rules ---
		+	$pwd_min_length = 14; // The "Accountant's" minimum for 2026
		+	$pwd_max_length = 32;
		+	$pwd_min_lower = 1; // At least one lowercase
		+	$pwd_min_upper = 1; // At least one uppercase
		+	$pwd_min_digit = 1; // At least one number
		+	$pwd_min_special = 1; // At least one special character (!@#$% etc)
		+	$pwd_complexity = 4; // Require all 4 classes above
		+
		+	// --- Block "Lazy" Passwords ---
		+	$pwd_no_reuse = true; // Don't let them reuse the old password
		+	$pwd_diff_login = true; // Don't allow password to contain the username
		+	$pwd_forbidden_chars = ""; // Add specific bad chars if needed
		+	</pre>

	===Kasulikud lisamaterjalid===		===Kasulikud lisamaterjalid===

Imre: /* Kasulikud lisamaterjalid */

2026-04-23T08:24:26Z

Kasulikud lisamaterjalid

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 11:24
158. rida:		158. rida:
	* [[Active Directory kasutamine operatsioonisüsteemiga Debian v. 7 Wheezy]]		* [[Active Directory kasutamine operatsioonisüsteemiga Debian v. 7 Wheezy]]
	* https://github.com/ltb-project/self-service-password		* https://github.com/ltb-project/self-service-password
		+	* https://self-service-password.readthedocs.io/en/stable/

Imre: /* docker kasutamine */

2026-04-23T07:26:55Z

docker kasutamine

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 10:26
125. rida:		125. rida:

	<pre>		<pre>
−	name: ~~p_tlb~~	+	name: p_ltb
	services:		services:
−	~~svc_tlb~~:	+	svc_ltb:
	image: docker.io/ltbproject/self-service-password:latest		image: docker.io/ltbproject/self-service-password:latest

136. rida:		136. rida:
	- '80:80'		- '80:80'

−	container_name: ~~cn_tlb~~	+	container_name: cn_ltb

	networks:		networks:
−	- ~~nw_tlb~~	+	- nw_ltb

	volumes:		volumes:
145. rida:		145. rida:

	networks:		networks:
−	~~nw_tlb~~:	+	nw_ltb:
−	name: ~~nw_tlb~~	+	name: nw_ltb
	driver: bridge		driver: bridge
	</pre>		</pre>

Imre: /* Kasulikud lisamaterjalid */

2026-04-23T07:25:17Z

Kasulikud lisamaterjalid

←Vanem redaktsioon		Redaktsioon: 23. aprill 2026, kell 10:25
117. rida:		117. rida:

	Ja ega seal midagi väga erinevat ka peale paroolivahetust näha pole.		Ja ega seal midagi väga erinevat ka peale paroolivahetust näha pole.
		+
		+	===2026 aasta kevade märkused===
		+
		+	====docker kasutamine====
		+
		+	docker compose kasutamiseks sobib
		+
		+	<pre>
		+	name: p_tlb
		+	services:
		+	svc_tlb:
		+	image: docker.io/ltbproject/self-service-password:latest
		+
		+	environment:
		+	- TZ=Europe/Tallinn
		+
		+	ports:
		+	- '80:80'
		+
		+	container_name: cn_tlb
		+
		+	networks:
		+	- nw_tlb
		+
		+	volumes:
		+	- '/srv/ltb/volume/var/www/conf/config.inc.local.php:/var/www/conf/config.inc.local.php'
		+
		+	networks:
		+	nw_tlb:
		+	name: nw_tlb
		+	driver: bridge
		+	</pre>
		+
		+	kus
		+
		+	* TODO

	===Kasulikud lisamaterjalid===		===Kasulikud lisamaterjalid===