freeipa

#9038 Concerns regarding 'ipa pwpolicy-mod --minlife 24 --maxlife 1'
Closed: fixed by frenaud. Opened by fcami.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 9): Bug 1825010

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
The command accept equal values:
# ipa pwpolicy-mod  --minlife 24 --maxlife 1
  Group: global_policy
  Max lifetime (days): 1
  Min lifetime (hours): 24
  History size: 0
  Character classes: 0
  Min length: 0
  Max failures: 6
  Failure reset interval: 60
  Lockout duration: 600
Is it feasible to change the message "Maximum password life must be greater than the minimum value"   to " Maximum password life must be greater than or equal to the minimum value."  since the command is accepting equal values?

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1825010

Issue linked to bug 1825010

Metadata Update from @fcami:
- Custom field changelog adjusted to ipa pwpolicy-mod --minlife $min --maxlife $max accepts $max >= $min, yet the error message says: "Maximum password life must be greater than minimum." Change the error message so that it conveys the actual logic.
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6086

master:

  • b8cea149c392bb05484c53dd4b48a9fa286e3d87 pwpolicy: change lifetime error message

ipa-4-9:

  • 76afa643f4afd0167fd670142aa70369d91d7af2 pwpolicy: change lifetime error message

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 5a909cff8df4b37cdba3bc5bfabf97cc11379094 ipatests: Check maxlife error message where minlife > maxlife specified

ipa-4-9:

  • 83551693b36c852ba455185469e4e459de435f0e ipatests: Check maxlife error message where minlife > maxlife specified
Metadata
None
None
None
None
None
https://github.com/freeipa/freeipa/pull/6086
ipa pwpolicy-mod --minlife $min --maxlife $max accepts $max >= $min, yet the error message says: "Maximum password life must be greater than minimum." Change the error message so that it conveys the actual logic.
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.