pwdUpdateTime when password policies are applied.
I've installed 10.2.11.15 on a lab machine (fedora17) and set passwordTrackUpdateTime to on in config. This is the first time I'm testing this feature, I dont know if this also happens in former 10.2.11x versions. *I've noticed that whenever a password policy is applied to an user, either directly or inherited from branch/ou, the pwdUpdateTime stops updating upon password changes. If I remove the password policy then the attribute works as expected. Is this the correct behaviour?Regards.JC.
-- Juan Carlos Camargo Carrillo** 957-211157 , 650932877 -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users |
pwdUpdateTime when password policies are applied.
This is not expected behavior, and looking at the code I'm not sure
how that's possible.* Please file a ticket and include an exact reproducible testcase. https://fedorahosted.org/389/ Thanks, Mark On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote: I've installed 10.2.11.15 on a lab machine (fedora17) and set passwordTrackUpdateTime to on in config. This is the first time I'm testing this feature, I dont know if this also happens in former 10.2.11x versions. *I've noticed that whenever a password policy is applied to an user, either directly or inherited from branch/ou, the pwdUpdateTime stops updating upon password changes. If I remove the password policy then the attribute works as expected. Is this the correct behaviour? Regards. JC. -- Juan Carlos Camargo Carrillo** 957-211157 , 650932877 -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users -- Mark Reynolds Red Hat, Inc mreynolds@redhat.com -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users |
pwdUpdateTime when password policies are applied.
Juan,
I did reproduce the problem.* If you setup a subtree policy through the console, it doesn't pull in the config setting.* I'll file the ticket. Mark On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote: I've installed 10.2.11.15 on a lab machine (fedora17) and set passwordTrackUpdateTime to on in config. This is the first time I'm testing this feature, I dont know if this also happens in former 10.2.11x versions. *I've noticed that whenever a password policy is applied to an user, either directly or inherited from branch/ou, the pwdUpdateTime stops updating upon password changes. If I remove the password policy then the attribute works as expected. Is this the correct behaviour? Regards. JC. -- Juan Carlos Camargo Carrillo** 957-211157 , 650932877 -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users -- Mark Reynolds Red Hat, Inc mreynolds@redhat.com -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users |
pwdUpdateTime when password policies are applied.
Juan,
There is a work around to get it working on 1.2.11.15.* You need to add these attributes to the "cn=cn=nsPwPolicyEntry, dc=example,dc=com" or whatever subtree you added the policy to: objectclass: extensibleObject passwordTrackUpdateTime: on In 1.2.11.16 this attribute will be added to the schema, so "objectclass: extensibleObject" will not be required.* It will also check the main config, and correctly enable this setting for subtree/user password policies.* You will also be able to turn it off for subtree/user policies if you so desire. Regards, Mark On 09/28/2012 11:14 AM, Mark Reynolds wrote: Juan, I did reproduce the problem.* If you setup a subtree policy through the console, it doesn't pull in the config setting.* I'll file the ticket. Mark On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote: I've installed 10.2.11.15 on a lab machine (fedora17) and set passwordTrackUpdateTime to on in config. This is the first time I'm testing this feature, I dont know if this also happens in former 10.2.11x versions. *I've noticed that whenever a password policy is applied to an user, either directly or inherited from branch/ou, the pwdUpdateTime stops updating upon password changes. If I remove the password policy then the attribute works as expected. Is this the correct behaviour? Regards. JC. -- Juan Carlos Camargo Carrillo** 957-211157 , 650932877 -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users -- Mark Reynolds Red Hat, Inc mreynolds@redhat.com -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users -- Mark Reynolds Red Hat, Inc mreynolds@redhat.com -- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users |
| All times are GMT. The time now is 12:32 PM. |
VBulletin, Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.