[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.



On Thu, 2010-12-02 at 12:24 +0100, Hallvard B Furuseth wrote:
> Thanks. Applied a similar patch to cvs HEAD, after fixing a memory leak.
> 
> Reproducing the bug:
> 
>   userPassword can exist without pwdChangedTime if you bypass
>   ppolicy: Use slapadd to add an entry with userPassword, or add
>   it to a subtree with no policy and then configure a policy.
> 
>   Then set up ppolicy and use ldapmodify to delete userPassword.
> 

Yes. I agree with that. That's precisely how we discovered the problem.

Thanks,
Martin.

-- 
Dr Martin DT Evans, Computing Services/Central Servers.