Bug 751179 - [ipa webui] Unable to change password, misleading error
Summary: [ipa webui] Unable to change password, misleading error
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: ipa
Version: 6.1
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Rob Crittenden
QA Contact: IDM QE LIST
URL:
Whiteboard:
Depends On:
Blocks: 752757
TreeView+ depends on / blocked
 
Reported: 2011-11-03 18:53 UTC by Namita Soman
Modified: 2011-12-06 18:43 UTC (History)
1 user (show)

Fixed In Version: ipa-2.1.3-9.el6
Doc Type: Bug Fix
Doc Text:
Do not document
Clone Of:
Environment:
Last Closed: 2011-12-06 18:43:40 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2011:1533 0 normal SHIPPED_LIVE Moderate: ipa security and bug fix update 2011-12-06 01:23:31 UTC

Description Namita Soman 2011-11-03 18:53:18 UTC 
Description of problem:
While testing bug 738693, ran into bug 751173. A combination of the two or possibly just 751173, is showing up in UI.

In UI, there is no field to enter current password. Reset password, fails with error - 
'current_password' is required
if the min lifetime is 1 hour

But if min lifetime is set to 0, can reset password.




Version-Release number of selected component (if applicable):
ipa-server-2.1.3-8.el6.x86_64


How reproducible:
always

Steps to Reproduce:
1. Add a user
2. Edit user and set password
3. Reset password again
  
Actual results:
error thrown:
'current_password' is required

Expected results:
If current password is required, there is no field for it.

But if min lifetime is changed, can reset password


Additional info:
Comment 4 Rob Crittenden 2011-11-04 18:37:41 UTC 
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2065
Comment 5 Martin Kosek 2011-11-07 13:21:34 UTC 
Fixed upstream:
master: https://fedorahosted.org/freeipa/changeset/2eb6414372581655ba04dff7539294c75f84a281
ipa-2-1: https://fedorahosted.org/freeipa/changeset/c6d19960d5efa1f896187d3239940abed3dbe9db
Comment 6 Rob Crittenden 2011-11-07 13:55:04 UTC 
The bottom line of this bug is that password change in the UI wasn't working for the self-service case.
Comment 8 Rob Crittenden 2011-11-07 20:10:09 UTC 
Backported patch from ipa-2-1 branch.
Comment 10 Namita Soman 2011-11-08 16:52:31 UTC 
testing
Comment 11 Namita Soman 2011-11-08 17:32:39 UTC 
I still see the same error as reported at the start of this bug. The error message is controlled by pw policy which in turn is controlled by python-ldap which doesn't support the password change extop. So better error handling will be addressed with cli issue - bug 751173.

 But in discussing this with Rob, it was decided that this bug will address the self-service case and add the current password field. Which is verified using ipa-server-2.1.3-9.el6.x86_64.
Comment 13 Martin Kosek 2011-11-09 08:32:56 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Do not document
Comment 14 errata-xmlrpc 2011-12-06 18:43:40 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2011-1533.html
Note You need to log in before you can comment on or make changes to this bug.