mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
ipa-pwd-extop plugin had a bug which prevented a cn=Directory Manager to change a password to a value that is not allowed by an associated password policy. Password policy checks should not apply to any operations done as cn=Directory Manager. The test creates a system account with associated policy that prevents password reuse. It then goes to try to change a password three times: - as a user: must succeeed - as a cn=Directory Manager: must succeed even with a password re-use - as a user again: must fail due to password re-use Related: https://pagure.io/freeipa/issue/7181 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com>