Skip to content

ltb-project/self-service-password

1.5
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
lib
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

LDAP Tool Box Self Service Password

CII Best Practices Build Status Documentation Status

Presentation

Self Service Password is a PHP application that allows users to change their password in an LDAP directory.

The application can be used on standard LDAPv3 directories (OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell, etc.) and also on Active Directory.

Screenshot

It has the following features:

  • Samba mode to change Samba passwords
  • Active directory mode
  • Local password policy:
    • Minimum/maximum length
    • Forbidden characters
    • Upper, Lower, Digit or Special characters counters
    • Reuse old password check
    • Password same as login
    • Complexity (different class of characters)
  • Help messages
  • Reset by questions
  • Reset by mail challenge (token sent by mail)
  • Reset by SMS (trough external Email 2 SMS service or SMS API)
  • Change SSH Key in LDAP directory
  • Captcha (built-in)
  • Mail notification after password change
  • Hook script before and after password change

Prerequisite

  • PHP (>=7)
  • PHP extensions required:
    • php-curl (haveibeenpwned api)
    • php-gd (captcha)
    • php-filter
    • php-ldap
    • php-mbstring (reset mail)
    • php-openssl (token crypt, probably built-in)
  • Smarty 3
  • strong cryptography functions available (for random_compat, PHP 7 or libsodium or /dev/urandom readable or php-mcrypt extension installed)
  • valid PHP mail server configuration (reset mail)
  • valid PHP session configuration (reset mail)

Documentation

Documentation is available on https://self-service-password.readthedocs.io/en/latest/

Docker

We provide an official Docker image.

Create a minimal configuration file:

vi ssp.conf.php
<?php // My SSP configuration
$keyphrase = "mysecret";
$debug = true;
?>

And run:

docker run -p 80:80 \
    -v $PWD/ssp.conf.php:/var/www/conf/config.inc.local.php \
    -it docker.io/ltbproject/self-service-password:latest

Download

Tarballs and packages for Debian and Red Hat are available on https://ltb-project.org/download.html

Debian and Red Hat repositories are also available, see installation instructions.

Source code

Source codes are available on https://github.com/ltb-project/self-service-password