search

pwm-project / pwm

pwm
Other
904 stars 251 forks source link

User Activation: setting initial password not possible for inactive user #362

Open DidiMolle opened 6 years ago

DidiMolle commented 6 years ago

Hi,

in the Account Activation module, it is not possible to set the initial password for an inactive user. Technically this should be no problem. Enabling the account could then be done in the post-actions.

Enabling the user account before setting the password (in the pre-actions) has the disadvantage that you cannot enable a user that was created with a blank password.

Is this a "feature" that is there for some good reasons, or is it somewhere configurable that the initial PW can be set for disabled users in the User Activation module?

BR Dieter

jcombs-pointblue commented 6 years ago

I’m not sure I’m following…I set a random password on the stub account when it’s created. When the user claims the account, they reset the password.

On Apr 17, 2018, at 04:28, DidiMolle notifications@github.com wrote:

Hi,

in the Account Activation module, it is not possible to set the initial password for an inactive user. Technically this should be no problem. Enabling the account could then be done in the post-actions.

Enabling the user account before setting the password (in the pre-actions) has the disadvantage that you cannot enable a user that was created with a blank password.

Is this a "feature" that is there for some good reasons, or is it somewhere configurable that the initial PW can be set for disabled users in the User Activation module?

BR Dieter

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/pwm-project/pwm/issues/362, or mute the thread https://github.com/notifications/unsubscribe-auth/AH25Q4KPfkngPiNkTHrIOAm9T5TR1IQBks5tpbW0gaJpZM4TX8po.

DidiMolle commented 6 years ago

Hi, thanks for your reply. When I set a random password, the "Minimum password age" policy comes into the game and my users had to wait 1 day (in my case) before they could activate the account. I could solve that now by setting pwdLastSet to 0 in the pre-actions. That solves my problem. So there is still my question why PWM cannot set the password for inactive accounts, but it doesn't block me anymore´. Thanks for your help! BR Dieter