OpenStack Identity (keystone)

Admin password reset should be exempt from password history validation

Bug #1630092 reported by Ron De Rose on 2016-10-04

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	OpenStack Identity (keystone)	Fix Released	Medium	Ron De Rose	OpenStack Identity (keystone) ocata-1 "o1"
	Newton	Fix Released	Medium	Unassigned

Bug Description

In Newton, we added password history validation for all password changes. However, for administrative password resets, we shouldn't validate against the end-user's password history.

Tags:

Ron De Rose (ronald-de-rose) on 2016-10-04

Changed in keystone:
assignee:	nobody → Ron De Rose (ronald-de-rose)

OpenStack Infra (hudson-openstack) on 2016-10-04

Changed in keystone:
status:	New → In Progress

Lance Bragstad (lbragstad) on 2016-10-04

Changed in keystone:
importance:	Undecided → Medium
milestone:	none → ocata-1
tags:	added: pci

Revision history for this message

Lance Bragstad (lbragstad) wrote on 2016-10-04:

For some reason the bot didn't pick this up - here is the patch:

https://review.openstack.org/#/c/379030/

Lance Bragstad (lbragstad) on 2016-10-04

tags:

added: newton-backport-potential

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-06: Fix merged to keystone (master)

Reviewed: https://review.openstack.org/379030
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=432fa4acd6d6297fdfd32de86a043488b87c7c43
Submitter: Jenkins
Branch: master

commit 432fa4acd6d6297fdfd32de86a043488b87c7c43
Author: Ronald De Rose <email address hidden>
Date: Wed Sep 28 23:06:02 2016 +0000

Remove password history validation from admin password resets

This patch removes password history validation from the update_user
(admin password reset) backend method.

    backport: newton
    Closes-Bug: #1630092
    Change-Id: Ic567841703c1da495131cbb052636bbe90d54819

Changed in keystone:
status:	In Progress → Fix Released

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-07: Fix proposed to keystone (stable/newton)

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/383846

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-10-13: Fix merged to keystone (stable/newton)

Reviewed: https://review.openstack.org/383846
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=18d6eb76ce7bf46e9ced352b7af366112df62b11
Submitter: Jenkins
Branch: stable/newton

commit 18d6eb76ce7bf46e9ced352b7af366112df62b11
Author: Ronald De Rose <email address hidden>
Date: Wed Sep 28 23:06:02 2016 +0000

Remove password history validation from admin password resets

This patch removes password history validation from the update_user
(admin password reset) backend method.

    backport: newton
    Closes-Bug: #1630092
    Change-Id: Ic567841703c1da495131cbb052636bbe90d54819
    (cherry-picked from 432fa4acd6d6297fdfd32de86a043488b87c7c43)