wolfd / pwm

PWM is an open source password self service application for LDAP directories. - exported from code.google.com/p/pwm
http://pwmdemo.weisberg.net/
0 stars 1 forks source link

"Minimum Random Challenges Required During Setup" setting not being honored if there is an user-supplied question configured #530

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Fill some random questions + one "user-supplied" question in "Profiles -> 
Challenge Policy"
2. Set "Minimum Random Required" to 1 in "Profiles -> Challenge Policy"
3. Set "Minimum Random Challenges Required During Setup" to 1 in "Profiles -> 
Challenge Policy"

What is the expected output? 
When an user logins for the first time to PWM, he should be asked to setup 
challenge questions and he should be forced to setup at least 1 challenge 
question. But 1 should be enough.
This configuration is correctly working with PWM 1.6.0

What do you see instead?
When an user logins for the first time to PWM, he is asked to setup challenge 
questions. If the user fills only one answer and press "Save Responses", the 
browser complains about the need of filling all empty fields(the user is 
presented with all random challenge questions configured in "Profiles -> 
Challenge Policy" by admin) and the user cannot save only 1 answer as setup in 
config. 

What version of PWM are you using?
1.7.0 b1228

What ldap directory and version are you using?
AD Windows 2008 R2

Please paste any error log messages below:
This warning is also present in logs:

WARN , config.ChallengeProfile, invalid challenge set configuration: too few 
challenges are required

no other warning are present since the forcing to compile all question fields 
is a browser-side warning.

Original issue reported on code.google.com by nicola.b...@gmail.com on 30 Jan 2014 at 8:13