No you cannot and that is a very insecure design. The password is hashed using MD5 and sent. You should configure your LDAP server to use SASL at very least.
On September 12, 2018 at 11:35:24 AM, Sebastián Castillo Carrión ( [email protected]) wrote: Does anyone know if it is possible to make Singularity send the user password (in the login process) without any type of encryption to the opensim server? The reason is that I am implementing ldap authentication opensim_server<->ldap_server, and https connection opensim_server<->client, and I need to send plain password to opensim so ldap authentication functions of the ldap library can be used (they use plain password as one of the arguments). Thank you. _______________________________________________ Opensim-dev mailing list [email protected] http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev _______________________________________________ Opensim-dev mailing list [email protected] http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
