Page 1 of 1

hashed passwords?

Posted: Mon Jan 25, 2021 3:17 pm
by UWBernie
When Nagios XI is configured for active directory authentication, what gets hashed into the database and/or /usr/local/nagiosxi/etc/htpasswd.users?

are passwords saved on the server or do they just get passed through to AD?

Re: hashed passwords?

Posted: Tue Jan 26, 2021 4:09 pm
by cdienger
XI will not save the password. Each time an AD user tries to log into XI XI just passes the credentials through to the DC.

Re: hashed passwords?

Posted: Wed Jan 27, 2021 9:51 am
by UWBernie
Thanks, so what is hashed in the DB then?

Re: hashed passwords?

Posted: Thu Jan 28, 2021 11:36 am
by cdienger
They're generated from random strings at the time that the user account is created. Index /usr/local/nagiosxi/html/includes/components/ldap_ad_integration/index.php:

Code: Select all

$password = random_string(12);