Project

General

Profile

Actions

Bug #19519

closed

Firefox prepopulates "Account username" of LDAP settings with normal user credentials

Added by Sebastian Gräßl over 7 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Users, Roles and Permissions
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Due to lazyness admin/changeme is saved as credentials for the Foreman in Firefox.
When editing LDAP authentication, Firefox prepopulates the Account username field with "admin" (if the field is empty, as it is when LDAP allows anonymous bind).

How reproducible:
always

Steps to Reproduce:
1. save login credentials in firefox
2. go to Administer → LDAP authentication
3. create a new LDAP or edit an existing one that has an empty account username

Actual results:
account username is set to the stored satellite user by Firefox

Expected results:
account username is empty

Additional info:
Marking the field in LDAP settings as autocomplete="off" might help, but I did not test it. (see https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion)


Related issues 1 (0 open1 closed)

Has duplicate Foreman - Bug #20962: Disable autocomplete on LDAP account nameDuplicate09/17/2017Actions
Actions

Also available in: Atom PDF