nextcloud/univention-app

rework needed for LDAP bind user

Closed this issue · 2 comments

from http://forum.univention.de/viewtopic.php?t=6521&p=25170#p25170

Using a machine account to bind to LDAP needs a method to deal with password changes (see http://docs.software-univention.de/developer-reference-4.1.html#join:secret:change)

Another method is to create a dedicated bind user for the application.

Just to emphasize this: The current usage of the machine account to bind to LDAP breaks every Nextcloud installation after 21 days (default interval for renewing the password of the machine account) at the latest!

Suggested fix in #10