crhume / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

AD User with "User cannot change password" set #85

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Configure an AD user with "User cannot change password"
2. Go to PWM and attempt to change password for this user

What is the expected output? What do you see instead?
The user tries to change his password and it keeps being rejected with 
localized error message corresponding to PASSWORD_BADPASSWORD.

An error message stating that the user is not able to change password due to 
administrator configuration in AD should be displayed. 

What version of PWM are you using?
1.5.5

What ldap directory and version are you using?
Microsoft AD 2008 R2

Please paste any error log messages below:

error setting password for user 'CN=xxx'' 4006 PASSWORD_BADPASSWORD ([LDAP: 
error code 19 - 00000005: AtrErr: DSID-03190F7B, #1: [x.x.x.x/]
    0: 00000005: DSID-03190F7B, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 9005a (unicodePwd)

Original issue reported on code.google.com by seb...@gmail.com on 11 Jul 2011 at 1:58

GoogleCodeExporter commented 9 years ago

Original comment by jrivard on 11 Jul 2011 at 3:47

GoogleCodeExporter commented 9 years ago
This error has been connected to the PWM error ERROR_PASSWORD_TOOSOON, as it is 
most likely caused by the default policy of minimum time interval between 
password changes.  As of svn revision 376.

Original comment by jrivard on 25 Mar 2012 at 2:30