Linux Archive

Linux Archive (http://www.linux-archive.org/)
-   Fedora User (http://www.linux-archive.org/fedora-user/)
-   -   pwdUpdateTime when password policies are applied. (http://www.linux-archive.org/fedora-user/708077-pwdupdatetime-when-password-policies-applied.html)

Juan Carlos Camargo 09-28-2012 11:09 AM

pwdUpdateTime when password policies are applied.
 
I've installed 10.2.11.15 on a lab machine (fedora17) and set passwordTrackUpdateTime to on in config. This is the first time I'm testing this feature, I dont know if this also happens in former 10.2.11x versions. *I've noticed that whenever a password policy is applied to an user, either directly or inherited from branch/ou, the pwdUpdateTime stops updating upon password changes. If I remove the password policy then the attribute works as expected. Is this the correct behaviour?Regards.JC.

--




Juan Carlos Camargo Carrillo**

957-211157 , 650932877

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Mark Reynolds 09-28-2012 02:33 PM

pwdUpdateTime when password policies are applied.
 
This is not expected behavior, and looking at the code I'm not sure
how that's possible.* Please file a ticket and include an exact
reproducible testcase.



https://fedorahosted.org/389/



Thanks,

Mark



On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote:


I've
installed 10.2.11.15 on a lab machine (fedora17) and set
passwordTrackUpdateTime to on in config. This is the first
time I'm testing this feature, I dont know if this also
happens in former 10.2.11x versions. *I've noticed that
whenever a password policy is applied to an user, either
directly or inherited from branch/ou, the pwdUpdateTime stops
updating upon password changes. If I remove the password
policy then the attribute works as expected. Is this the
correct behaviour?

Regards.
JC.




--











Juan Carlos Camargo
Carrillo**

957-211157
, 650932877











--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users



--
Mark Reynolds
Red Hat, Inc
mreynolds@redhat.com


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Mark Reynolds 09-28-2012 03:14 PM

pwdUpdateTime when password policies are applied.
 
Juan,



I did reproduce the problem.* If you setup a subtree policy through
the console, it doesn't pull in the config setting.* I'll file the
ticket.



Mark



On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote:


I've
installed 10.2.11.15 on a lab machine (fedora17) and set
passwordTrackUpdateTime to on in config. This is the first
time I'm testing this feature, I dont know if this also
happens in former 10.2.11x versions. *I've noticed that
whenever a password policy is applied to an user, either
directly or inherited from branch/ou, the pwdUpdateTime stops
updating upon password changes. If I remove the password
policy then the attribute works as expected. Is this the
correct behaviour?

Regards.
JC.




--











Juan Carlos Camargo
Carrillo**

957-211157
, 650932877











--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users



--
Mark Reynolds
Red Hat, Inc
mreynolds@redhat.com


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Mark Reynolds 09-28-2012 03:58 PM

pwdUpdateTime when password policies are applied.
 
Juan,



There is a work around to get it working on 1.2.11.15.* You need to
add these attributes to the "cn=cn=nsPwPolicyEntry,
dc=example,dc=com" or whatever subtree you added the policy to:



objectclass: extensibleObject

passwordTrackUpdateTime: on



In 1.2.11.16 this attribute will be added to the schema, so
"objectclass: extensibleObject" will not be required.* It will also
check the main config, and correctly enable this setting for
subtree/user password policies.* You will also be able to turn it
off for subtree/user policies if you so desire.



Regards,

Mark



On 09/28/2012 11:14 AM, Mark Reynolds wrote:


Juan,



I did reproduce the problem.* If you setup a subtree policy
through the console, it doesn't pull in the config setting.* I'll
file the ticket.



Mark



On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote:


I've installed 10.2.11.15 on a lab machine
(fedora17) and set passwordTrackUpdateTime to on in config.
This is the first time I'm testing this feature, I dont know
if this also happens in former 10.2.11x versions. *I've
noticed that whenever a password policy is applied to an
user, either directly or inherited from branch/ou, the
pwdUpdateTime stops updating upon password changes. If I
remove the password policy then the attribute works as
expected. Is this the correct behaviour?

Regards.
JC.




--











Juan Carlos Camargo
Carrillo**

957-211157
, 650932877











--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users



--
Mark Reynolds
Red Hat, Inc
mreynolds@redhat.com





--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users



--
Mark Reynolds
Red Hat, Inc
mreynolds@redhat.com


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


All times are GMT. The time now is 07:33 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.