You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Carlos Sanchez (JIRA)" <ji...@codehaus.org> on 2006/07/31 19:58:31 UTC
[jira] Created: (CONTINUUM-794) Password expiration
Password expiration
-------------------
Key: CONTINUUM-794
URL: http://jira.codehaus.org/browse/CONTINUUM-794
Project: Continuum
Issue Type: Sub-task
Reporter: Carlos Sanchez
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (CONTINUUM-794) Password expiration
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=comments#action_74712 ]
Carlos Sanchez commented on CONTINUUM-794:
------------------------------------------
JSP will show a "Your password has expired", and needs fields: username, current password, new password, confirm new password
The webwork action will call changePassword in usermanager (already implemented)
Leverage the current user forms if they can be reused
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Affects Versions: 1.1
> Reporter: Carlos Sanchez
> Fix For: 1.1
>
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (CONTINUUM-794) Password expiration
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=comments#action_73335 ]
Carlos Sanchez commented on CONTINUUM-794:
------------------------------------------
we need to store only the date created.
- Number of days valid is a configuration option, for now it can just be injected ffrom the xml config file, and will be shared for all users. Being number of days it must be of type int. You store the date as Date, no need to use a calendar, convert the days to milliseconds and you now if it's expired or not.
- in ContinuumUserDetailsService.loadUserByUsername you can check if date created + expiration days < current date and if true set accountNotExpired to false in the returned UserDetails
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Reporter: Carlos Sanchez
> Assigned To: Lester Ecarma
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (CONTINUUM-794) Password expiration
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=all ]
Carlos Sanchez updated CONTINUUM-794:
-------------------------------------
Affects Version/s: 1.1
All the password change possible results need to be considered, like wrong current password, new password doesn't follow the configured password rules,...
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Affects Versions: 1.1
> Reporter: Carlos Sanchez
> Fix For: 1.1
>
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (CONTINUUM-794) Password expiration
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=all ]
Carlos Sanchez updated CONTINUUM-794:
-------------------------------------
Description:
In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
I think Acegi will redirect to he page for change password, need to investigate.
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Reporter: Carlos Sanchez
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (CONTINUUM-794) Password expiration
Posted by "Jesse McConnell (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=all ]
Jesse McConnell closed CONTINUUM-794.
-------------------------------------
Resolution: Won't Fix
provided in the p-sec policy password configuration
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Affects Versions: 1.1
> Reporter: Carlos Sanchez
> Assigned To: Lester Ecarma
> Fix For: 1.1
>
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (CONTINUUM-794) Password expiration
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=comments#action_73332 ]
Carlos Sanchez commented on CONTINUUM-794:
------------------------------------------
>From Lester:
- when adding a user account is created, it asks for the number of days the account will be valid. The default is forever (meaning no expiration), which happens when the user leaves it unfilled. I will need input on whether we'll opt for the user to input the actual expiration date instead. I initially had it to accept decimal values as I'm not sure if 'days' would be a good unit of measure here.
- when the account expires, acegi will prevent the account from being authenticated. It is handled similar to an incorrect login.
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Reporter: Carlos Sanchez
> Assigned To: Lester Ecarma
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (CONTINUUM-794) Password expiration
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=all ]
Carlos Sanchez closed CONTINUUM-794.
------------------------------------
Assignee: Carlos Sanchez (was: Lester Ecarma)
Resolution: Fixed
Fix Version/s: 1.1
Added
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Affects Versions: 1.1
> Reporter: Carlos Sanchez
> Assigned To: Carlos Sanchez
> Fix For: 1.1
>
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Reopened: (CONTINUUM-794) Password expiration
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/CONTINUUM-794?page=all ]
Carlos Sanchez reopened CONTINUUM-794:
--------------------------------------
Assignee: (was: Carlos Sanchez)
Added the hook in acegi that didn't work before, now it redirects to /user/expiredPassword.action (configurable in application.xml)
This action and jsp need to be implemented
> Password expiration
> -------------------
>
> Key: CONTINUUM-794
> URL: http://jira.codehaus.org/browse/CONTINUUM-794
> Project: Continuum
> Issue Type: Sub-task
> Affects Versions: 1.1
> Reporter: Carlos Sanchez
> Fix For: 1.1
>
>
> In the acegi user details service, every time a user authenticates check for date of password creation, if more than defined time set expired=true in the database and return the user with expired=true too
> I think Acegi will redirect to he page for change password, need to investigate.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira