From f6de479c13ddfe29a6db08912db757a3745340eb Mon Sep 17 00:00:00 2001 From: Jakub Onderka Date: Mon, 9 Sep 2019 19:14:03 +0200 Subject: [PATCH] require_password_confirmation doesnt work --- appendices/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/appendices/README.md b/appendices/README.md index 15cfad8..0cc3e16 100644 --- a/appendices/README.md +++ b/appendices/README.md @@ -377,3 +377,4 @@ Because LDAP and MISP users are paired by e-mail address, it is possible to migr * When a user is disabled in LDAP and also in MISP and then enabled in LDAP, it will be enabled in MISP for next login just when `updateUser` is set to `true`. * Currently it is not possible to log in with both LDAP and local (MISP) accounts. * Admins can change users email address. But when `updateUser` is set to true, when the user will log in again, the e-mail address will be updated from LDAP. +* `Security.require_password_confirmation` setting currently doesnt work with LDAP authentication. But on the other hand, since user cannot change e-mail address and password, this setting is not important.