vavavr00m / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

Honor 'passwordinHistory' attribute from LDAP Password Policy #258

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Configure a valid value for passwordinHistory in the LDAP password policy 
(described here 
http://www.centos.org/docs/5/html/CDS/ag/8.0/User_Account_Management-Managing_th
e_Password_Policy.html#Configuring_a_Global_Password_Policy_Using_the_Command_Li
ne-Password_Policy_Attributes)

2. Attempt to change or reset a password that is in the user's history.

What is the expected output? What do you see instead?

This is more of a request for enhancement - we hoped that PWM could honor the 
password history by interpreting the LDAP error code 19 returned for "password 
in history".

PWM currently fails silently, and returns the user back to the 'password 
submit' form with no message or response about success or failure.

What version of PWM are you using?
1.6.1

What ldap directory and version are you using?
CentOS Directory Server 5

Please paste any error log messages below:
Error message from LDAP server...

2012-06-05 13:21:07, WARN , pwm.PasswordUtility, {2g,<uid>} 4006 
PASSWORD_BADPASSWORD (error setting password for user 
'uid=<uid>,ou=employees,dc=<schooldistrict>,dc=org'' [LDAP: error code 19 - 
password in history]) [<IP Address>]

Original issue reported on code.google.com by kirkcl...@gmail.com on 11 Aug 2012 at 9:39