From 6f5a2f091d893c194b067177a7bc61779f0405d8 Mon Sep 17 00:00:00 2001 From: Nikolai R Kristiansen Date: Sun, 26 Mar 2017 18:14:35 +0200 Subject: [PATCH] sec: don't store passwords on Django User --- inside/authentication.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inside/authentication.py b/inside/authentication.py index 1011d2d..655b3e8 100644 --- a/inside/authentication.py +++ b/inside/authentication.py @@ -32,7 +32,7 @@ class InsideBackend(object): self.user = User.objects.get(username=self.inside_user.ldap_username) except User.DoesNotExist: # Create a new user. - self.user = User(username=self.inside_user.ldap_username, password=password) + self.user = User.objects.create_user(username=self.inside_user.ldap_username) # Sync detail and groups from Inside to local Django install (for display and permissions) self._update_user_details()