Back to bug 1390342
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Noriko Hosoi | 2016-10-31 18:27:48 UTC | Status | NEW | POST |
| Noriko Hosoi | 2016-10-31 21:29:29 UTC | Status | POST | MODIFIED |
| Fixed In Version | 389-ds-base-1.3.5.10-12.el7 | |||
| errata-xmlrpc | 2016-10-31 21:35:35 UTC | Status | MODIFIED | ON_QA |
| Noriko Hosoi | 2016-10-31 21:38:08 UTC | Fixed In Version | 389-ds-base-1.3.5.10-12.el7 | 389-ds-base-1.3.5.10-12.el7_3 |
| Noriko Hosoi | 2016-11-01 19:50:18 UTC | Doc Text | Cause: The utility ns-accountstatus.pl shows wrong status for accounts inactivated by inactivity. If there is no acct policy subentry the wrong basedn was used to get the inactivity limit. This prevented the script from detecting if an account was inactivated due to inactivity. Fix: If there is no subentry, then use the existing config entry to get the inactivity limit. Result: ns-accountstatus.pl always shows correct status. | |
| Doc Type | If docs needed, set a value | Bug Fix | ||
| Marc Muehlfeld | 2016-11-14 12:54:06 UTC | CC | mmuehlfe | |
| Doc Text | Cause: The utility ns-accountstatus.pl shows wrong status for accounts inactivated by inactivity. If there is no acct policy subentry the wrong basedn was used to get the inactivity limit. This prevented the script from detecting if an account was inactivated due to inactivity. Fix: If there is no subentry, then use the existing config entry to get the inactivity limit. Result: ns-accountstatus.pl always shows correct status. | Previously, when "acctPolicySubentry" was not set in the "specattrname" parameter of the account policy plug-in, the incorrect base distinguished name (DN) was used. As a consequence, the "ns-accountstatus.pl" script incorrectly showed the wrong status for accounts inactivated by inactivity. To fix the problem, the script now uses the existing config entry to get the inactivity limit if no "acctPolicySubentry" is set. As a result, the script now shows the correct status. | ||
| Flags | needinfo?(nhosoi) | |||
| Viktor Ashirov | 2016-11-14 14:29:56 UTC | Flags | needinfo?(nhosoi) | |
| Status | ON_QA | VERIFIED | ||
| Marc Muehlfeld | 2016-11-18 08:29:39 UTC | Doc Text | Previously, when "acctPolicySubentry" was not set in the "specattrname" parameter of the account policy plug-in, the incorrect base distinguished name (DN) was used. As a consequence, the "ns-accountstatus.pl" script incorrectly showed the wrong status for accounts inactivated by inactivity. To fix the problem, the script now uses the existing config entry to get the inactivity limit if no "acctPolicySubentry" is set. As a result, the script now shows the correct status. | Previously, when "acctPolicySubentry" was not set in the "specattrname" parameter of the account policy plug-in, incorrect base distinguished name (DN) was used. As a consequence, the "ns-accountstatus.pl" script incorrectly showed the wrong status for accounts inactivated by inactivity. To fix the problem, the script now uses the existing config entry to obtain the inactivity limit if no "acctPolicySubentry" is set. As a result, the script now shows the correct status. |
| errata-xmlrpc | 2016-12-06 00:23:53 UTC | Status | VERIFIED | RELEASE_PENDING |
| errata-xmlrpc | 2016-12-06 17:04:18 UTC | Status | RELEASE_PENDING | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2016-12-06 12:04:18 UTC |
Back to bug 1390342