Hooks when user change his password

magostinelli · September 30, 2023, 1:58pm

I setup a hooks for post_user_update, and it works well, but It’s triggered only when an admin edit the user, not, for example, when a user change his password.

Any suggestion?

Tagada · September 30, 2023, 5:44pm

Hello,
This is by design. SSOwat does not trigger this hook.
What is your use case ?

ljf · September 30, 2023, 9:57pm

I guess it’s to synchronize password with an other db (like for the samba use case)

github.com

YunoHost-Apps/samba_ynh/blob/master/hooks/post_user_update

#!/bin/bash

echo "${YNH_USER_PASSWORD}
${YNH_USER_PASSWORD}
" | sudo smbpasswd -a $YNH_USER_USERNAME

magostinelli · October 1, 2023, 1:32pm

Yes, exactly! I have a dendrite server (matrix chat) on same host, with docker.
I want to synchronize the passwords.

Alternatively, is possibile to access the user password in ldap? It’s encrypted.
I tryed with user exports, but the password field is empty.

Tagada · October 1, 2023, 2:40pm

Ah… So one way I can think of now, is to patch your SSOwat yourself to trigger your script.
The downside is that you’ll have to patch it again when a new version comes up.

github.com

YunoHost/SSOwat/blob/38a6f23f3805a098b4ab757ff002f3a5fb3c377a/helpers.lua#L804


      
          local dn = conf["ldap_identifier"].."="..user..","..conf["ldap_group"]
          
          -- Open the LDAP connection
          local ldap = lualdap.open_simple(conf["ldap_host"], dn, args.currentpassword)
          
          local password = hash_password(args.newpassword)
          
          -- Modify the LDAP information
          if ldap:modify(dn, {'=', userPassword = password }) then
              if validation == nil then
                  flash("win", t("password_changed"))
              else
                  flash("win", t(result_msg))
              end
          
              -- Reset the password cache
              cache:set(user.."-password", args.newpassword, conf["session_timeout"])
              return redirect(conf.portal_url.."portal.html")
          else
              flash("fail", t("password_changed_error"))
          end

magostinelli · October 1, 2023, 6:50pm

Ok, thanks i will take a look.

Otherwise, can i ask someone to indroduce new hooks, that is triggered after user action. What do you think?

system · October 31, 2023, 6:51pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.