freeipa

#7601 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
Closed: fixed Opened by frenaud.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1590647

Description of problem:
In IPA, running ldapmodify as "Directory Manager" against a userpassword
reflects on krblastpwdchange, only on RHEL6 but not RHEL7.
Version-Release number of selected component (if applicable):
IPA 3.X
IPA 4.5
How reproducible:
Always
Steps to Reproduce:
1.Setup RHEL6 and RHEL7 IPA
2.Try to modify a userpassword as directory manager:
~~~
ldapmodify -v -Z -h `hostname` -x -D "cn=Directory Manager" -W << EOF
dn: uid=jsmith,cn=users,cn=accounts,dc=example,dc=com
changetype: modify
replace: userPassword
userPassword: apassword
EOF
~~~
3. Check user's krblastpwdchange on both REHL6 and RHEL7:
~~~
# ipa user-show jsmith --all
~~~
Actual results:
krblastpwdchange is updated after password reset on RHEL6 but not on RHEL7.
Expected results:
krblastpwdchange gets updated on RHEL7 in a similar way as RHEL6.
Additional info:

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1590647

PR: https://github.com/freeipa/freeipa/pull/2181

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2181

master:

  • a71729cc01b83916b5e362a38ce3d65e129b1815 In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

ipa-4-7:

  • 890d773902d36aac376edba52f5090d75d683d0f In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

master:

  • c1a0c3c556e936077e6d5b386621a36113af86fe Tests: add integration test for password changes by dir mgr

ipa-4-6:

  • fb3553ff8bfa6d90cb8c02a4231b9d123fc343c4 In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-7:

  • 7d40c66ea8074015f97841dcead92c158d6cf3c9 Tests: add integration test for password changes by dir mgr

ipa-4-6:

  • eb8a57f12e7b45e05f8632f9b0b9f8b39bd9ceb7 Tests: add integration test for password changes by dir mgr

ipa-4-5:

  • 55ed4f1364143303670cf05f51479dcde92c9cf2 In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange

ipa-4-5:

  • 07a8001eead657bbd2fa8e76f6606a06d2b1eeca Tests: add integration test for password changes by dir mgr
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.