Hide Forgot
Description of problem: User can change the following options via "ipa pwpolicy-mod" CLI --maxfail --failinterval --lockouttime --priority But user can not change above via password policy Web UI page Version-Release number of selected component (if applicable): 2.1.1 How reproducible: always Steps to Reproduce: 1. setup ipa server 2. go to password policy page: Policy (tab) -> Password Policies (sub tab) -> select any existing password policy (including global password policy) 3. Actual results: No editable fields exist for "maxfail", "failinterval" "lockouttime" and "priority" Expected results: Web UI should provide comparable feature as CLI Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1944
fixed upstream master: 89b869d2c2ab6a86b3be12f1aff33437e9974571 ipa-2-1: 07b87aac69edab0ea4aaa79ec5b4edc7af2c382a
Created attachment 530336 [details] password policy screen shot verified: see attached screen shot verision: ipa-server-2.1.3-3.el6.x86_64
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Cause: Web UI Password Policy interface miss some of the password policy fields present in the CLI (Max failures, Failure reset interval, Lockout duration, and Priority) Consequence: User cannot set these parameters via Web UI but has to fallback to CLI Fix: All missed Password Policy fields have been added to Web UI Result: Password Policy parameters can be fully managed from both CLI and Web UI
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2011-1533.html