Syspass: Syspass ask for Master Key when LDAP users provide a wrong previous password

[ortizleo]

Hello.

Syspass ask for master key when user change their LDAP password and pass a wrong previous password.

To reproduce:

1. Change LDAP password from some user
2. Try to login and syspass will ask for previous password
3. Provide a wrong previous password and press "enter"
4. Syspass will diplay a message "Wrong master password" and will ask for MK

I agree that it is a security feature but can we make syspass ask for MK only if user fail 2/3 times the previous password?

Syspass Version: 3.0 (305.19020701) 
Config: 300.18112501 
App: 303.19012402 

DB: 300.18111901

Database | SERVER_VERSION : 10.3.13-MariaDB-log 
CLIENT_VERSION : 10.1.38-MariaDB

[deajan]

I too experience that issue.
I think it's a nice to have if the user does not remember it's previous password, but there could be an alternative, like a small 'use master password instead' button or so.

[nuxsmin]

@ortizleo hello, I agree with you, it could ask for a few more attempts and then either ask for the master password or, as said @deajan , show up a button to enter it.

Noted for next release.

Thanks for the feedback!