Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RelaxRules doesnt appear to work for setting pwdChangedTime #204

Open
lucastheisen opened this issue Dec 13, 2021 · 0 comments
Open

RelaxRules doesnt appear to work for setting pwdChangedTime #204

lucastheisen opened this issue Dec 13, 2021 · 0 comments

Comments

@lucastheisen
Copy link

Describe the bug
Unable to use the ldapmodify --control RelaxRules:true to set the pwdChangedTime in order to facilitate integration testing of password policy. This blog seems to indicate support for the control at some level, and this jira issue indicates it was merged in fixVersion 6.5 (which i am not sure how forgerock versions relate to opendj versions). I also searched the latest admin guide which is very slim on related content, the google group linked to as OpenDJ Community Archive seems to have been removed, and posted a question on Gitter which doesn't appear to have a lot of activity.

To Reproduce
Steps to reproduce the behavior:

  1. Create a user
  2. Attempt to change password changed time with
    ldapmodify \
      --bindDN "cn=Directory Manager" \
      --bindPassword set4now \
      --hostname localhost \
      --port 3389 \
      --control RelaxRules:true <<EOF
    dn: uid=kermitthefrog,ou=people,dc=example,dc=com
    control: 1.3.6.1.4.1.4203.666.5.12
    changetype: modify
    replace: pwdChangedTime
    pwdChangedTime: 20211203224637.000Z
    EOF
  3. See:
    Processing MODIFY request for
    uid=kermitthefrog,ou=people,dc=example,dc=com
    The LDAP modify request failed: 12 (Unavailable Critical Extension)
    Additional Information:  Entry
    uid=kermitthefrog,ou=people,dc=example,dc=com cannot be modified
    because the request contained a critical control with OID RelaxRules that is
    not supported by the Directory Server for this type of operation

Expected behavior
pwdChangedTime gets explicitly set value

Desktop (please complete the following information):

  • OS: Ubuntu 18.03
  • Browser: n/a
  • Version: n/a

Smartphone (please complete the following information):
n/a

Additional context
Currently using OpenDJ 4.4.11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant