freeipa

#8551 Unlock user accounts after a password reset and replicate that unlock to all IdM servers
Closed: fixed by abbra. Opened by rcritten.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1784657

Description of problem:
When resetting a password on a locked account. We need to go to each LDAP/IDM
server and manually unlock the accounts. Resetting the password on a locked
account should also unlock it on any LDAP/IDM servers that may be locked.
Resetting the password and creating/deleting new accounts is replicated.
Unlocking the account after a password reset should also replicate.
Version-Release number of selected component (if applicable):
RHEL 7, RHEL 8
How reproducible:
At will
Steps to Reproduce:
1. Reset the password on a locked user account.
2.
3.
Actual results:
Visit every single IdM server, find the servers where the account is locked,
and unlock that account by hand.
Expected results:
Resetting a password should also unlock the account in all authentication
servers in the domain.
Additional info:

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1784657

Metadata Update from @rcritten:
- Issue assigned to rcritten

master:

  • 3ab3578b36bc7b8ce777e38ba764649d1b684ce5 On password reset also set krbLastAdminUnlock to unlock account
  • ca6fc689ba92ee2db6945f37429ee7fe8d75a4b6 ipatests: Test that password reset unlocks users too

ipa-4-8:
* 69b1a5f On password reset also set krbLastAdminUnlock to unlock account
* 015e226 ipatests: Test that password reset unlocks users too

Metadata Update from @abbra:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.