[Freeipa-devel] Password expired on new user

[David O'Brien]

David O'Brien wrote:
> I just created a new user but as soon as I did and the interface
> returned to the View User page, it said "Password has expired". I
> thought I saw a comment from Suzanne? about this but now I can't find it.
> 
> Why would this happen?
> 
> 

More info:
Obviously enough, I couldn't log in as the new user because of this.
When I went back to the server as admin and tried to update the user (by
changing the password), I got a "500 - Internal Server Error".

Here's what I can see in the log:

2007-11-30 14:56:10,106 ipagui.controllers ERROR CherryPy 500 error (500
- Internal Server Error) for request 'POST /user/update'
Traceback (most recent call last):
  File "/usr/lib/python2.5/site-packages/cherrypy/_cphttptools.py", line
105, in _run
    self.main()
  File "/usr/lib/python2.5/site-packages/cherrypy/_cphttptools.py", line
254, in main
    body = page_handler(*virtual_path, **self.params)
  File "<string>", line 3, in update
  File "/usr/lib/python2.5/site-packages/turbogears/controllers.py",
line 344, in expose
    *args, **kw)
  File "<string>", line 5, in run_with_transaction
  File "/usr/lib/python2.5/site-packages/turbogears/database.py", line
312, in so_rwt
    retval = func(*args, **kw)
  File "<string>", line 5, in _expose
  File "/usr/lib/python2.5/site-packages/turbogears/controllers.py",
line 359, in <lambda>
    mapping, fragment, args, kw)))
  File "/usr/lib/python2.5/site-packages/turbogears/controllers.py",
line 386, in _execute_func
    output = errorhandling.try_call(func, *args, **kw)
  File "/usr/lib/python2.5/site-packages/turbogears/errorhandling.py",
line 72, in try_call
    return func(self, *args, **kw)
  File "<string>", line 3, in update
  File
"/usr/lib/python2.5/site-packages/turbogears/identity/conditions.py",
line 235, in require
    return fn(self, *args, **kwargs)
  File "/usr/share/ipa/ipagui/subcontrollers/user.py", line 520, in update
    rv = client.modifyPassword(kw['krbprincipalname'], "",
kw.get('userpassword'))
KeyError: 'krbprincipalname'


Just for fun (?) I tried to change the max password lifetime in the
webUI. It was 864000 and I tried to make it longer, but the UI only
accepted 3 characters so now it's stuck at 999  :-\


-- 

David O'Brien <mailto:daobrien at redhat.com>
RHCT
PGP-KeyID: 0x443CBA7B


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20071130/50d18686/attachment.sig>