search

ubccr / mokey

FreeIPA self-service account management portal
BSD 3-Clause "New" or "Revised" License
190 stars 45 forks source link

Password reset prompt for expired password fails #127

Open dsajdak opened 10 months ago

dsajdak commented 10 months ago

When a user's password is expired, they're prompted to change it.
pw-expire1

However, when attempting to do so they receive an error: "something bad happened. Please contact site admin"

The logs show either: "Failed to change expired password for user" err="password does not conform to policy" but it does.

or: "Failed to change expired password for user" err="invalid current password" However the user was just authenticated using these credentials which initiated the password change process.

dsajdak commented 5 months ago

Also, on further review the password is actually changed. If the user attempts to login with the new password, the authentication succeeds.