freeipa

Clone
Source Code
GIT

#7601 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
Closed: fixed 5 years ago Opened 5 years ago by frenaud.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1590647

Description of problem:

In IPA, running ldapmodify as "Directory Manager" against a userpassword
reflects on krblastpwdchange, only on RHEL6 but not RHEL7.

Version-Release number of selected component (if applicable):
IPA 3.X
IPA 4.5

How reproducible:
Always

Steps to Reproduce:
1.Setup RHEL6 and RHEL7 IPA
2.Try to modify a userpassword as directory manager:
~~~
ldapmodify -v -Z -h `hostname` -x -D "cn=Directory Manager" -W << EOF
dn: uid=jsmith,cn=users,cn=accounts,dc=example,dc=com
changetype: modify
replace: userPassword
userPassword: apassword
EOF
~~~

3. Check user's krblastpwdchange on both REHL6 and RHEL7:
~~~
# ipa user-show jsmith --all
~~~

Actual results:

krblastpwdchange is updated after password reset on RHEL6 but not on RHEL7.

Expected results:
krblastpwdchange gets updated on RHEL7 in a similar way as RHEL6.

Additional info:

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1590647
5 years ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2181
5 years ago

master:

  • a71729c In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

ipa-4-7:

  • 890d773 In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

master:

  • c1a0c3c Tests: add integration test for password changes by dir mgr

ipa-4-6:

  • fb3553f In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
5 years ago

ipa-4-7:

  • 7d40c66 Tests: add integration test for password changes by dir mgr

ipa-4-6:

  • eb8a57f Tests: add integration test for password changes by dir mgr

ipa-4-5:

  • 55ed4f1 In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

ipa-4-5:

  • 07a8001 Tests: add integration test for password changes by dir mgr

Login to comment on this ticket.

Metadata
None
None
None
None
None
None
None
None
None
None
None
None
None
None
https://github.com/freeipa/freeipa/pull/2181
None
None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1590647
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.