#4119 [RFE] - Show password expiration warning when IdM users login with SSH keys
Closed: duplicate 4 years ago by thalman. Opened 4 years ago by pbrezina.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1765354

Description of problem:
When an IdM user logs in with SSH key based authentication, they do not see
password expiration warnings.  Customer would like to see password expiration
warnings even when logging in with SSH keys so users can proactively change
their passwords before they expire.


Version-Release number of selected component (if applicable):
RHEL 7.7 IdM


How reproducible:
Everytime


Steps to Reproduce:
1. Login to RHEL 7 server with IdM user using SSH key authentication, and with
a password expiring soon

Actual results:
No password expiration warning is shown


Expected results:
Password expiration warning is shown


Additional info:
https://bugzilla.redhat.com/show_bug.cgi?id=1654395#c3 mentioned "potentially
provide an additional LDAP control for non-Kerberos/non-LDAP auth (ssh public
keys, etc) to allow advisory notification from SSSD during PAM session phase"
I'm not sure if this would allow for password expiration warnings for users
logging in with SSH keys or not.

Metadata Update from @pbrezina:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1765354

4 years ago

Metadata Update from @pbrezina:
- Issue close_status updated to: duplicate
- Issue status updated to: Closed (was: Open)

4 years ago

Metadata Update from @pbrezina:
- Issue status updated to: Open (was: Closed)

4 years ago

Metadata Update from @thalman:
- Issue tagged with: bugzilla

4 years ago

Metadata Update from @thalman:
- Custom field design_review adjusted to on
- Custom field mark adjusted to on
- Custom field patch adjusted to on
- Custom field review adjusted to on
- Custom field sensitive adjusted to on
- Custom field testsupdated adjusted to on
- Issue close_status updated to: duplicate
- Issue status updated to: Closed (was: Open)

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5080

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata