From 100fc6f676c4c58acc6127d733afb6e2eb73bd19 Mon Sep 17 00:00:00 2001
From: Robin Sonnabend <robin@fsmpi.rwth-aachen.de>
Date: Wed, 20 Jan 2021 16:36:18 +0100
Subject: [PATCH] Don't use old insecure password crypto unless LDAP forces us
to
---
dokuwiki/templates/local.protected.php.j2 | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/dokuwiki/templates/local.protected.php.j2 b/dokuwiki/templates/local.protected.php.j2
index 20067a6..8f7b0bf 100644
--- a/dokuwiki/templates/local.protected.php.j2
+++ b/dokuwiki/templates/local.protected.php.j2
@@ -13,9 +13,11 @@ $conf['plugin']['authad']['update_mail'] = 0;
$conf['disableactions'] = 'register,profile_delete,resendpwd';
$conf['superuser'] = '{{ item.ad_superuser }}';
$conf['manager'] = '{{ item.ad_manager }}';
+$conf['passcrypt'] = 'ssha';
+{% else %}
+$conf['passcrypt'] = 'bcrypt';
{% endif %}
-$conf['passcrypt'] = 'ssha';
$conf['mailfrom'] = '{{ item.mail }}';
$conf['htmlmail'] = 0;
$conf['userewrite'] = '1';
--
GitLab