diff options
| author | Martin Kosek <mkosek@redhat.com> | 2014-06-10 08:42:03 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-06-10 08:42:03 +0200 |
| commit | c41b782bc59cd0cb70cbd62d543f9c538109d410 (patch) | |
| tree | cde577765ad1d824f43089f0179d74c808df2463 /ipapython/py_default_encoding | |
| parent | 2a8c509567754877ed0188784d7c38250484be48 (diff) | |
| download | freeipa-c41b782bc59cd0cb70cbd62d543f9c538109d410.tar.gz freeipa-c41b782bc59cd0cb70cbd62d543f9c538109d410.tar.xz freeipa-c41b782bc59cd0cb70cbd62d543f9c538109d410.zip | |
Revert "Check for password expiration in pre-bind"
This reverts commit bfdbd3b6ad7c437e7dd293d2488b2d53f4ea7ba6.
Forceful validation of password expiration date in a BIND pre-callback
breaks LDAP password change extended operation as the password change
is only allowed via authenticated (bound) channel. Passwords could be
only changed via kadmin protocol. This change would thus break
LDAP-only clients and Web UI password change hook.
This patch will need to be revisited so that unauthenicated corner
cases are also revisited.
https://fedorahosted.org/freeipa/ticket/1539
Diffstat (limited to 'ipapython/py_default_encoding')
0 files changed, 0 insertions, 0 deletions