LDAP & application passwords should play nicer toghether

[deajan]

Hello,

Of what I am understanding, an application password is supposed to help gain access to NextCloud Server without having to specify the real password.

When a LDAP user changes its password, the application password dissappears.
Since the LDAP user is not desactivated (only password has been changed), I think it would be much better to keep the application password working so the client application still can sync, without having to change that application password on every "password change".

There could be an option to make application passwords "permanent" until manual revocation, unless an admin policy forbids to.

Any thoughts ?

[nextcloud-bot]

GitMate.io thinks possibly related issues are #7135 (LDAP password change not always working), #7156 (LDAP Invalid private key after password reset), #3762 (Slow login after change ldap password), #6887 (Add LDAP expired password attribute check), and #4162 (LDAP Password Changes -> Encryption App).

[deajan]

Well GitMate.io bot is wrong, none of these issues are related :)

[MorrisJobke]

Duplicate of #2581

See especially #2581 (comment)

[deajan]

Thank you for the hint, sorry for the noise.