Bug 30755 – Heimdal Default für "Password expires" ist nicht mehr "never" sondern 1 Jahr

Bug 30755 - Heimdal Default für "Password expires" ist nicht mehr "never" sondern 1 Jahr


Summary:	Heimdal Default für "Password expires" ist nicht mehr "never" sondern 1 Jahr

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Kerberos
Version:	UCS 3.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 3.1-0-errata
Assigned To:	Arvid Requate
QA Contact:	Felix Botner

URL:	https://github.com/heimdal/heimdal/co...
Keywords:

Depends on:	27281 30589
Blocks:
	Show dependency tree / graph

Reported:	2013-03-12 09:27 CET by Janis Meybohm
Modified:	2013-03-19 14:16 CET (History)
CC List:	4 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Janis Meybohm

2013-03-12 09:27:21 CET

+++ This bug was initially created as a clone of Bug #30589 +++

We should provide the fix from Bug #30589 as errata for UCS 3.1-0

Comment 1 Arvid Requate

2013-03-13 18:52:45 CET

The patch for Bug #30589 was merged into the scope errata3.1-0 and heimdal was rebuilt in this scope.

Advisory: 2013-03-13-heimdal.yaml

Comment 2 Felix Botner

2013-03-14 10:27:45 CET

OK, with the old version kinit is not possible for a user with sambaPwdLastSet: 1363143407

-> kinit test1
test1@TEST.FB's Password: 
Your password will expire at Thu Jan  1 01:00:00 1970

and no "password_lifetime" in the /etc/heimdal-kdc/kdc.conf.

With the errata version kinit works as expected. "kadmin" Password expiry for new users is set to never.

-> kadmin -l get test2
            Principal: test2@TEST.FB
    Principal expires: never
     Password expires: never


OK - Advisory

Comment 3 Janek Walkenhorst

2013-03-19 14:16:00 CET

http://errata.univention.de/3.1-errata74.html