Re: Plaintext passwords in guacamole.properties

2018-07-12 Thread Mike Jumper
On Thu, Jul 12, 2018 at 9:36 AM, Erik Berndt wrote: >>Your best option is to set filesystem permissions appropriately such that >> only Guacamole can read guacamole.properties. > > I had a similar thought a few months ago and this is your best best. Yes, > the password is stored in plain text on a

Re: Plaintext passwords in guacamole.properties

2018-07-12 Thread Erik Berndt
>Your best option is to set filesystem permissions appropriately such that only Guacamole can read guacamole.properties. I had a similar thought a few months ago and this is your best best. Yes, the password is stored in plain text on a publicly available server, but it's not being transmitted ex

Re: Plaintext passwords in guacamole.properties

2018-07-12 Thread Mike Jumper
On Thu, Jul 12, 2018, 01:07 smoke wrote: > Hello! > > I am a little put off by the unhashed password in ldap-search-bind-password > (guacamole.properties). Is there a way to use the hash instead of the > visible pass? The same thing goes for the postgresql-password. > No - they're not that k