Bug #2250

Password expiration warnings are sent to locked users

Added by Davide Principi almost 8 years ago. Updated over 7 years ago.

Status:CLOSEDStart date:11/20/2013
Priority:NormalDue date:11/20/2013
Assignee:-% Done:

100%

Category:nethserver-directory
Target version:v6.5-beta3
Security class: Resolution:
Affected version:v6.4-beta1 NEEDINFO:No

Description

User in __state=new, with no password set, receives password expiration warnings.

Those warnings must be sent to active users only.

Associated revisions

Revision fe555136
Added by Davide Principi over 7 years ago

activeUsers(): read user __state prop. Refs #2250

Revision 97fe1ec9
Added by Davide Principi over 7 years ago

Send password warnings to active users only. Refs #2250

Revision fd3a712f
Added by Davide Principi over 7 years ago

Restored user-activate action in password-modify event. Refs #2250

Revision ab344e58
Added by Davide Principi over 7 years ago

Stop sending out warnings after password is expired. Refs #2250

History

#1 Updated by Giacomo Sanchietti almost 8 years ago

  • Target version changed from v6.4-beta2 to v6.5-beta3

#2 Updated by Davide Principi over 7 years ago

  • Due date set to 11/20/2013
  • Status changed from NEW to TRIAGED
  • Start date set to 11/20/2013
  • % Done changed from 0 to 20
  • Estimated time set to 4.00

#3 Updated by Davide Principi over 7 years ago

  • Status changed from TRIAGED to ON_DEV
  • Assignee set to Davide Principi
  • % Done changed from 20 to 30

#4 Updated by Davide Principi over 7 years ago

  • Status changed from ON_DEV to MODIFIED
  • Assignee deleted (Davide Principi)
  • % Done changed from 30 to 60

Test case

  1. Update nethserver-directory to modified version
  2. Create a new user account, user01 but do NOT set password
  3. Tweak password ageing info, by setting it 181 days in the past (you can use lchage -d) or stop ntpd and move system date 181 days in the future
  4. Execute
        # /etc/cron.daily/warnpassexpire
    
  5. Verify in /var/log/messages if password-expired event was NOT fired for user01:
        # grep -F 'Processing event: password-expired user01' /var/log/messages
    
  6. Set password for user01, and tweak password age, by setting it 181 days in the past. user01 is now active with an expired password.
  7. Execute warnpassexpire again and verify the event is fired
  8. Lock user01
  9. Execute warnpassexpire again and verify the event is NOT fired

#5 Updated by Davide Principi over 7 years ago

  • Status changed from MODIFIED to ON_QA
  • % Done changed from 60 to 70

In nethserver-testing:
nethserver-directory-1.2.3-3.0git97fe1ec9.ns6.noarch.rpm
nethserver-directory-1.2.3-4.0gitfd3a712f.ns6.noarch.rpm
nethserver-directory-1.2.3-6.0gitab344e58.ns6.noarch.rpm

#6 Updated by Giacomo Sanchietti over 7 years ago

  • Assignee set to Giacomo Sanchietti

#7 Updated by Giacomo Sanchietti over 7 years ago

  • Status changed from ON_QA to VERIFIED
  • Assignee deleted (Giacomo Sanchietti)
  • % Done changed from 70 to 90
[root@test ~]# date
Tue Dec 10 09:06:36 GMT 2013

[root@test ~]# lchage -l giacomo
Account is not locked.
Minimum:    0
Maximum:    180
Warning:    7
Inactive:    -1
Last Change:    06/14/2013
Password Expires:    12/11/2013
Password Inactive:    12/10/2013
Account Expires:    Never

Account is locked.
Minimum:    0
Maximum:    180
Warning:    7
Inactive:    -1
Last Change:    06/14/2013
Password Expires:    12/11/2013
Password Inactive:    12/10/2013
Account Expires:    Never
After execution of warnpassexpire:
  • no event was fired for user1
  • event was fired for for giacomo

Locked user giacomo, no events fired.

Marking as VERIFIED

#8 Updated by Davide Principi over 7 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100

In nethserver-updates:
nethserver-samba-1.4.0-1.ns6.noarch.rpm
nethserver-directory-1.3.0-1.ns6.noarch.rpm
nethserver-dnsmasq-1.1.0-1.ns6.noarch.rpm
nethserver-shorewall-1.0.3-1.ns6.noarch.rpm
nethserver-mail-server-1.5.0-1.ns6.noarch.rpm
nethserver-mail-filter-1.1.4-1.ns6.noarch.rpm
nethserver-nethgui-1.3.0-1.ns6.noarch.rpm
nethserver-base-1.5.0-1.ns6.noarch.rpm
nethserver-lib-1.4.0-1.ns6.noarch.rpm
nethserver-httpd-admin-1.1.0-1.ns6.noarch.rpm
nethserver-yum-1.2.0-1.ns6.noarch.rpm
nethserver-ntopng-1.1.0-1.ns6.noarch.rpm

Also available in: Atom PDF