Password change rejected

[389-ds-bot]

Cloned from Pagure issue: https://pagure.io/389-ds-base/issue/47406

• Created at 2013-06-25 21:18:01 by akrivoka
• Closed as Duplicate
• Assigned to nobody

---

Using the latest version of 389 packages in Fedora 19:

[akrivoka@vm-061 ~]$ rpm -qa | grep 389
389-ds-base-libs-1.3.1.2-1.fc19.x86_64
389-ds-base-1.3.1.2-1.fc19.x86_64
389-ds-base-devel-1.3.1.2-1.fc19.x86_64

Trying to modify the password as described below, always fails with Constraint violation.

[akrivoka@vm-061 ~]$ cat modify_pwd.txt 
dn: uid=admin,ou=people,o=ipaca
changetype: modify
replace: userpassword
userpassword: NewPassword123!
[akrivoka@vm-061 ~]$ ldapmodify -x -D 'cn=directory manager' -w blablabla -f modify_pwd.txt 
modifying entry "uid=admin,ou=people,o=ipaca"
ldap_modify: Constraint violation (19)
	additional info: Password does not meet the policy requirements

However, it works with this previous koji build of 389 packages:

389-ds-base-devel-1.3.0.5-1.fc19.x86_64
389-ds-base-libs-1.3.0.5-1.fc19.x86_64
389-ds-base-1.3.0.5-1.fc19.x86_64

[389-ds-bot]

Comment from rmeggins (@richm) at 2013-06-25 21:59:24

Is this with plain 389 or with IPA with the ipa pwpolicy plugin?
Do you have any password policy configured?

[389-ds-bot]

Comment from akrivoka at 2013-06-26 02:49:37

Replying to [comment:1 richm]:

Is this with plain 389 or with IPA with the ipa pwpolicy plugin?
Do you have any password policy configured?

It is a plain FreeIPA server installation without any custom configuration.
I have attempted the above ldapmodify command right after running ipa-server-install.

[389-ds-bot]

Comment from rmeggins (@richm) at 2013-06-26 03:10:16

Replying to [comment:2 akrivoka]:

Replying to [comment:1 richm]:

Is this with plain 389 or with IPA with the ipa pwpolicy plugin?
Do you have any password policy configured?

It is a plain FreeIPA server installation without any custom configuration.
I have attempted the above ldapmodify command right after running ipa-server-install.

Is it possible it is being rejected by the ipa password plugin?

[389-ds-bot]

Comment from nkinder (@nkinder) at 2013-07-03 00:14:10

Did you install IPA with the AD trust feature enabled?

[389-ds-bot]

Comment from akrivoka at 2013-07-08 16:41:24

Replying to [comment:4 nkinder]:

Did you install IPA with the AD trust feature enabled?

No, but I can confirm that with the new version of 389 packages (listed below), the password change succeeds.

389-ds-base-libs-1.3.1.3-1.fc19.x86_64
389-ds-base-devel-1.3.1.3-1.fc19.x86_64
389-ds-base-1.3.1.3-1.fc19.x86_64

[389-ds-bot]

Comment from nkinder (@nkinder) at 2013-07-08 20:45:51

Replying to [comment:5 akrivoka]:

Replying to [comment:4 nkinder]:

Did you install IPA with the AD trust feature enabled?

No, but I can confirm that with the new version of 389 packages (listed below), the password change succeeds.

389-ds-base-libs-1.3.1.3-1.fc19.x86_64
389-ds-base-devel-1.3.1.3-1.fc19.x86_64
389-ds-base-1.3.1.3-1.fc19.x86_64

This is very likely the same problem as ticket 47419, which was fixed in 389-ds-base-1.3.1.3-1.fc19. I'm going to go ahead and close this ticket.

[389-ds-bot]

Comment from rmeggins (@richm) at 2017-02-11 22:57:09

Metadata Update from @richm:

• Issue set to the milestone: N/A