You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Oldrich Novak (JIRA)" <ji...@apache.org> on 2012/07/11 15:26:35 UTC
[jira] [Created] (DIRSERVER-1735) When ads-pwdmaxage attribute is
set to more then 2147483, then all user passwords are expirer forever.
Oldrich Novak created DIRSERVER-1735:
----------------------------------------
Summary: When ads-pwdmaxage attribute is set to more then 2147483, then all user passwords are expirer forever.
Key: DIRSERVER-1735
URL: https://issues.apache.org/jira/browse/DIRSERVER-1735
Project: Directory ApacheDS
Issue Type: Bug
Components: core
Affects Versions: 2.0.0-M7
Reporter: Oldrich Novak
We want to configure password max age for 90 days. We set ads-pwdmaxage to value 7776000. From this moment all user passwords are always expired. We found the root cause:
There is a bug in source code. package org.apache.directory.server.core.authn.PasswordUtil class. Method
public static boolean isPwdExpired( String pwdChangedZtime, int pwdMaxAgeSec ).
You multiply -> long time = pwdMaxAgeSec * 1000;
pwdMaxAgeSec is int and when it is 7776000 multiplied by 1000 will get out of int range.
Please convert pwdMaxAgeSec to long before multiplying it by 1000 and assigning the result into long time.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (DIRSERVER-1735) When ads-pwdmaxage attribute is
set to more then 2147483, then all user passwords are expirer forever.
Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1735?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pierre-Arnaud Marcelot resolved DIRSERVER-1735.
-----------------------------------------------
Resolution: Fixed
Fix Version/s: 2.0.0-M8
Assignee: Pierre-Arnaud Marcelot
Fixed at commit 1362460.
http://svn.apache.org/viewvc?rev=1362460&view=rev
Thanks for the report and the fix.
> When ads-pwdmaxage attribute is set to more then 2147483, then all user passwords are expirer forever.
> ------------------------------------------------------------------------------------------------------
>
> Key: DIRSERVER-1735
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1735
> Project: Directory ApacheDS
> Issue Type: Bug
> Components: core
> Affects Versions: 2.0.0-M7
> Reporter: Oldrich Novak
> Assignee: Pierre-Arnaud Marcelot
> Fix For: 2.0.0-M8
>
>
> We want to configure password max age for 90 days. We set ads-pwdmaxage to value 7776000. From this moment all user passwords are always expired. We found the root cause:
> There is a bug in source code. package org.apache.directory.server.core.authn.PasswordUtil class. Method
> public static boolean isPwdExpired( String pwdChangedZtime, int pwdMaxAgeSec ).
> You multiply -> long time = pwdMaxAgeSec * 1000;
> pwdMaxAgeSec is int and when it is 7776000 multiplied by 1000 will get out of int range.
> Please convert pwdMaxAgeSec to long before multiplying it by 1000 and assigning the result into long time.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira