Bug 55415 - Do not ignore the password policy by default, only when generating passwords
Do not ignore the password policy by default, only when generating passwords
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: UMC - Wizards
UCS@school 5.0
Other Linux
: P5 normal (vote)
: UCS@school 5.0 v3-errata
Assigned To: Tobias Wenzel
Daniel Tröder
https://git.knut.univention.de/univen...
:
: 52731 (view as bug list)
Depends on: 55392
Blocks: 52731 55393 55399 55400
  Show dependency treegraph
 
Reported: 2022-11-11 17:10 CET by Tobias Wenzel
Modified: 2023-05-26 10:56 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tobias Wenzel univentionstaff 2022-11-11 17:10:36 CET
When creating a user or modifying a user and setting a password, the password should be checked against the current password policy. When #900 is implemented this will be automatically the case.

Until a new UCS@school release (5.1 or later) is made, the behavior should however not change. So to restore the current (5.0v3) behavior, set the option on the User class to the ignore password policy when creating a user. Do not set the "ignore" option when changing a user, as that was the old behavior.

The behavior of the UMC module can be changed by setting a UCR variable. By default (when the UCRV is unset) it should be the old behavior (ignore the password policy when creating a user, but checking it when changing a user).
Comment 2 Daniel Tröder univentionstaff 2022-11-17 12:42:19 CET
All fixed and tested in

Package: ucs-school-umc-wizards
Version: 12.0.12A~5.0.0.202211150913

Package: ucs-test-ucsschool
Version: 7.3.85A~5.0.0.202211170943
Comment 3 Tobias Wenzel univentionstaff 2022-11-17 16:27:00 CET
Errata updates for UCS@school 5.0 v3 have been released.

https://docs.software-univention.de/ucsschool-changelog/5.0v3/de/changelog.html

If this error occurs again, please clone this bug.
Comment 4 Oliver Friedrich univentionstaff 2022-12-14 12:26:54 CET
*** Bug 52731 has been marked as a duplicate of this bug. ***