Bug 448786 - PassSync doesn't use the LDAP Password Modify Extended Operation
Summary: PassSync doesn't use the LDAP Password Modify Extended Operation
Keywords:
Status: CLOSED DEFERRED
Alias: None
Product: 389
Classification: Retired
Component: Sync Service
Version: 1.1.0
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Rich Megginson
QA Contact: Orla Hegarty
URL:
Whiteboard:
Depends On:
Blocks: 389_1.3.0 512820 690316
TreeView+ depends on / blocked
 
Reported: 2008-05-28 19:52 UTC by Loris Santamaria
Modified: 2015-11-19 22:22 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-11-19 22:22:30 UTC
Embargoed:

Attachments (Terms of Use)

Description Loris Santamaria 2008-05-28 19:52:33 UTC 
Description of problem:

PassSync does a ldapmodify on the userPassword attribute on FDS. So an optional
password change plugin on FDS, like ipa-pwd-extop, never gets triggered
  
Actual results:

Only the userPassword attribute is changed on FDS 

Expected results:

UserPassword, samba hashes and krbPrincipalKey should get modified when using a
password change plugin like ipa-pwd-extop


Additional info:
Comment 1 Rich Megginson 2009-04-09 17:16:05 UTC 
This falls under the category of RFC correctness
Comment 3 Martin Kosek 2012-01-04 13:45:04 UTC 
Upstream ticket:
https://fedorahosted.org/389/ticket/122
Comment 4 Noriko Hosoi 2015-11-19 22:22:30 UTC 
Closing this bug since we moved to the ticket system:
https://fedorahosted.org/389/ticket/122
Note You need to log in before you can comment on or make changes to this bug.