<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello Davy,</p>
<p>yes, it is a bug. Fixed today. <br>
</p>
<p>If I am not mistaken, a workaround (if you cannot upgrade
midPoint to master branch now) is to remove deprecated password
expiration information from the default password policy. And (if
needed) use password lifetime settings in the security policy (<a
moz-do-not-send="true"
href="https://wiki.evolveum.com/display/midPoint/Security+Policy+Configuration#SecurityPolicyConfiguration-Configuringpasswordrelatedpolicies">https://wiki.evolveum.com/display/midPoint/Security+Policy+Configuration#SecurityPolicyConfiguration-Configuringpasswordrelatedpolicies</a>).<br>
</p>
<p>We should fix our initial objects to avoid using deprecated
features in them (<a moz-do-not-send="true"
href="https://jira.evolveum.com/browse/MID-4085">MID-4085</a>).<br>
</p>
<pre class="moz-signature" cols="72">Pavol Mederly
Software developer
evolveum.com
</pre>
<div class="moz-cite-prefix">On 25.07.2017 14:42, Davy Priem wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CABE3CF3-0F52-4575-9992-85392A761C76@vives.be">
<pre wrap="">Hi,
During testing I also noticed there’s something weird with the password expiration. Installed a brand new Midpoint 3.6 (on mariadb) and few days later, passwords were expired too (even administrator). Maybe this is a bug?
Best regards
Davy Priem
</pre>
<blockquote type="cite">
<pre wrap="">Op 24 jul. 2017, om 23:15 heeft Kromhout, Ethan A. <a class="moz-txt-link-rfc2396E" href="mailto:ethan@unc.edu"><ethan@unc.edu></a> het volgende geschreven:
Hello,
This question is specific to some recent builds I've been doing from the "valtri/docker-midpoint-mariadb" published docker image that has recently been updated to 3.6, and so may not be appropriate for this list, but I thought someone here might understand what setting or policy is causing what I'm seeing.
Twice now I have done builds off of this image and everything has come up fine for me after some minor tweaks to the apache configuration, but after a few days, less than 5, all my users can no longer log in, and receive a " User doesn't have defined password." error in the GUI. I don't see anything interesting in the idm.log, but looking in the database I see entries like the below in m_audit_event.
| 132 | <a class="moz-txt-link-freetext" href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a> | 1500902355806-0-2 | 0 | 6 | localhost | administrator | 00000000-0000-0000-0000-000000000002 | password expired | DefaultNode | 3 | administrator | 0:0:0:0:0:0:0:1 | NULL | CFA0610ACB46DED269278A0012604BDE | NULL | NULL | NULL | NULL | NULL | 1500902355806-0-1 | NULL | 2017-07-24 13:19:15.000000 |
So "password expired" in the message seems like it could be my problem. After this happened the first time, I noted that a difference between this docker image and ones built on the 3.5.1 docker image was that there was no password policy linked in the system configuration. I added one after a rebuild and was hopeful, but 5 days later all my accounts are locked again.
I do not see this issue in another container that I built off of the 3.5.1 image, and manually upgraded to 3.6, so I don't think this has to do with 3.6, more likely some configuration I am missing.
Thanks,
Ethan
6C2F 9067 96D4 AB4A 9621 4FEB 3069 4100 EBFB 55D1
_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre wrap="">
_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>