Project

General

Profile

Actions

Feature #4200

closed

Would be great: config sync option to NOT sync user auth passwords

Added by Eduard Rozenberg over 9 years ago. Updated over 4 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
XMLRPC
Target version:
-
Start date:
01/11/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

Hello,

It would be great to have a new option to not sync passwords for auth users in config sync settings.

Currently config auth user sync is all or nothing - all info or no info.

By adding an option to not include passwords in the user sync, different passwords could be used on
pfsense master vs. slave.

That way if someone breaks one password on one machine they won't now also have access to the other firewall.

Actions #1

Updated by Chris Buechler over 9 years ago

  • Status changed from New to Rejected

No, would not be great. That would never be a good idea.

Actions #2

Updated by Jim Pingle over 4 years ago

  • Category changed from 62 to XMLRPC
Actions

Also available in: Atom PDF