[Freeipa-devel] Patch for #1539

[Simo Sorce]

> > Pushed to master: bfdbd3b6ad7c437e7dd293d2488b2d53f4ea7ba6
> 
> Hello,
> This patch broke some of our tests.
> 
> ipatests.test_ipaserver.test_changepw:test_changepw.test_invalid_auth
> ipatests.test_xmlrpc.test_user_plugin:test_denied_bind_with_expired_principal.test_1_bind_as_test_user
> ipatests.test_xmlrpc.test_user_plugin:test_denied_bind_with_expired_principal.test_3_bind_as_renewed_test_user
> 
> fail with: INVALID_CREDENTIALS: {'info': 'The user password is expired',
> 'desc': 'Invalid credentials'}
> 
> 
> ipatests.test_ipaserver.test_changepw:test_changepw.test_pwpolicy_error
> 
> fails with: AssertionError: 'invalid-password' != 'policy-error'
> 
> 
> ipatests.test_ipaserver.test_changepw:test_changepw.test_pwpolicy_success
> 
> fails with: AssertionError: 'invalid-password' != 'ok'

I guess we need to fix some of these tests, but first we need to fix password change with expired credentials to work when the old password is provided.

This will not work with non-password based mechanisms though ...

Simo.