Red Hat Bugzilla – Bug 751179
[ipa webui] Unable to change password, misleading error
Last modified: 2011-12-06 13:43:40 EST
Description of problem: While testing bug 738693, ran into bug 751173. A combination of the two or possibly just 751173, is showing up in UI. In UI, there is no field to enter current password. Reset password, fails with error - 'current_password' is required if the min lifetime is 1 hour But if min lifetime is set to 0, can reset password. Version-Release number of selected component (if applicable): ipa-server-2.1.3-8.el6.x86_64 How reproducible: always Steps to Reproduce: 1. Add a user 2. Edit user and set password 3. Reset password again Actual results: error thrown: 'current_password' is required Expected results: If current password is required, there is no field for it. But if min lifetime is changed, can reset password Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/2065
Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/2eb6414372581655ba04dff7539294c75f84a281 ipa-2-1: https://fedorahosted.org/freeipa/changeset/c6d19960d5efa1f896187d3239940abed3dbe9db
The bottom line of this bug is that password change in the UI wasn't working for the self-service case.
Backported patch from ipa-2-1 branch.
testing
I still see the same error as reported at the start of this bug. The error message is controlled by pw policy which in turn is controlled by python-ldap which doesn't support the password change extop. So better error handling will be addressed with cli issue - bug 751173. But in discussing this with Rob, it was decided that this bug will address the self-service case and add the current password field. Which is verified using ipa-server-2.1.3-9.el6.x86_64.
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Do not document
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2011-1533.html