Bug 751179

Summary:	[ipa webui] Unable to change password, misleading error
Product:	Red Hat Enterprise Linux 6	Reporter:	Namita Soman <nsoman>
Component:	ipa	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED ERRATA	QA Contact:	IDM QE LIST <seceng-idm-qe-list>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.1	CC:	mkosek
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ipa-2.1.3-9.el6	Doc Type:	Bug Fix
Doc Text:	Do not document	Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-12-06 18:43:40 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	752757

Description Namita Soman 2011-11-03 18:53:18 UTC

Description of problem:
While testing bug 738693, ran into bug 751173. A combination of the two or possibly just 751173, is showing up in UI.

In UI, there is no field to enter current password. Reset password, fails with error - 
'current_password' is required
if the min lifetime is 1 hour

But if min lifetime is set to 0, can reset password.




Version-Release number of selected component (if applicable):
ipa-server-2.1.3-8.el6.x86_64


How reproducible:
always

Steps to Reproduce:
1. Add a user
2. Edit user and set password
3. Reset password again
  
Actual results:
error thrown:
'current_password' is required

Expected results:
If current password is required, there is no field for it.

But if min lifetime is changed, can reset password


Additional info:

Comment 4 Rob Crittenden 2011-11-04 18:37:41 UTC

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2065

Comment 5 Martin Kosek 2011-11-07 13:21:34 UTC

Fixed upstream:
master: https://fedorahosted.org/freeipa/changeset/2eb6414372581655ba04dff7539294c75f84a281
ipa-2-1: https://fedorahosted.org/freeipa/changeset/c6d19960d5efa1f896187d3239940abed3dbe9db

Comment 6 Rob Crittenden 2011-11-07 13:55:04 UTC

The bottom line of this bug is that password change in the UI wasn't working for the self-service case.

Comment 8 Rob Crittenden 2011-11-07 20:10:09 UTC

Backported patch from ipa-2-1 branch.

Comment 10 Namita Soman 2011-11-08 16:52:31 UTC

testing

Comment 11 Namita Soman 2011-11-08 17:32:39 UTC

I still see the same error as reported at the start of this bug. The error message is controlled by pw policy which in turn is controlled by python-ldap which doesn't support the password change extop. So better error handling will be addressed with cli issue - bug 751173.

 But in discussing this with Rob, it was decided that this bug will address the self-service case and add the current password field. Which is verified using ipa-server-2.1.3-9.el6.x86_64.

Comment 13 Martin Kosek 2011-11-09 08:32:56 UTC

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Do not document

Comment 14 errata-xmlrpc 2011-12-06 18:43:40 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2011-1533.html