gandres / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

password pre-expire #387

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Set the pre-expire time to 86400 seconds in the Config manager.
2. login with a user that will hav a password expired within 24 hours

What is the expected output? What do you see instead?
I would expect a forced password change. Instead, I get the main menu.

What version of PWM are you using?
Latest build

I'll post a small bugfix.

Original issue reported on code.google.com by sebastia...@gmail.com on 17 May 2013 at 3:33

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
I'v found another issue with Password Expire Warn time. The helptext says:

"Number of seconds before a user's password expires in which to warn the user 
to change their password. If the user's password will expire within this time 
frame, the system will warn the user during a CommandServlet checkExpire or 
checkAll operation.

If this time is zero or less than the expirePreTime, this feature will be 
disabled. The recommended setting for this value is 432000 (5 days).
"

However I don't see any check on zero or less than the expirePreTime in the 
code.

Attached a file that fixes both issues (Password Expire Warn time and Password 
Pre-expire time).

Original comment by sebastia...@gmail.com on 17 May 2013 at 4:07

Attachments:

GoogleCodeExporter commented 9 years ago

Original comment by menno.pi...@gmail.com on 23 May 2013 at 8:07

GoogleCodeExporter commented 9 years ago
Implemented in r556.

Thanks for contributing.

Original comment by menno.pi...@gmail.com on 23 May 2013 at 8:10