Description Florian Best 2017-05-11 17:29:39 CEST

Created attachment 8841 [details]
patch

# create user with posix,samba and expired password
udm users/user create --position cn=users,dc=update,dc=test --option posix --option samba --set username=h8fulvhzub --set firstname=la89yrgujm --set lastname=vkiy57bd6w --set pwdChangeNextLogin=1 --set password=kw0bn707lq

# try to change password via UMC
curl -i -d "{\"options\":{\"username\":\"h8fulvhzub\",\"password\":\"kw0bn707lq\",\"new_password\":\"o4yrqus17x\"}}" -H "Content-Type: application/json" http://localhost/univention/auth

→ displays the following error message in UMC:

"""Changing password failed. The reason could not be determined. In case it helps, the raw error message will be displayed: External password quality program failed: Traceback (most recent call last). Errorcode 20: The new password could not be set.
"""

The traceback is nowhere ever shown or logged, because kpasswd strips everything after the first newline ("Traceback (most recent call last).\n…").

This can be changed with the attached patch.

+++ This bug was initially created as a clone of Bug #44582 +++