On 09/12/2013 03:14 PM, Bright, Daniel wrote:

Jakub,

 

Thanks for the response, I figured out why I was getting the constraint violation, in my case it was because I have the “passwordminage” set for my policy, when I changed the user attribute “passwordallowchangetime” to the current date then I was able to perform the passwd operation. So at this point I believe the password policy is being applied, however I am just not getting all of the responses I would like, I get things like “password is too short”, “your password will expire in X days”, but I would expect to get something like “You cannot change your password again for X days” from the above

 

This leads me to another question, is there a way I can map certain responses to responses that I define?


The responses are related to error codes that the server returns. I do not think you can define them unless the DS you use allows you to.
In SSSD you definitely can't. We just propagate what we got from the server to the user. There was a bug in that area that has been fixed recently as Jakub mentioned earlier.
https://fedorahosted.org/sssd/ticket/1827

You might however play some sort of a trick with translations and redefine the strings but this would really be a big hack.

 

Thanks,

Daniel B



_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/