Help with trac #89

[Jonathan "Duke" Leto]

Howdy,

I am currently digging into Trac #89:

https://fedorahosted.org/389/ticket/89

Would it be possible for anybody to add a few comments to the ticket
with some helpful hints about where in the codebase I should be
looking to fix that issue?

Also, if somebody could describe exactly what the *correct* behavior
should be, that would help me in resolving that ticket.

Thanks!

Duke

[Mark Reynolds]

HI Duke,

We add bind response controls in ds/ldap/servers/slapd/bind.c  around 
line 772

Looks like need_new_pw() handles grace logins & controls, but I haven't 
had a chance to look at it closely.

Mark

On 07/02/2012 04:20 PM, Jonathan "Duke" Leto wrote:
> Howdy,
>
> I am currently digging into Trac #89:
>
> https://fedorahosted.org/389/ticket/89
>
> Would it be possible for anybody to add a few comments to the ticket
> with some helpful hints about where in the codebase I should be
> looking to fix that issue?
>
> Also, if somebody could describe exactly what the *correct* behavior
> should be, that would help me in resolving that ticket.
>
> Thanks!
>
> Duke

[Nathan Kinder]

On 07/02/2012 01:20 PM, Jonathan "Duke" Leto wrote:
> Howdy,
>
> I am currently digging into Trac #89:
>
> https://fedorahosted.org/389/ticket/89
>
> Would it be possible for anybody to add a few comments to the ticket
> with some helpful hints about where in the codebase I should be
> looking to fix that issue?
>
> Also, if somebody could describe exactly what the *correct* behavior
> should be, that would help me in resolving that ticket.

I updated the ticket with a link to the relevant section of the most 
current password policy draft.  The response control that it mentions is 
constructed by the slapi_pwpolicy_make_response_control() function in 
ds/ldap/servers/slapd/pw.c.  You probably want to look at where we call 
that function for some examples, but it sounds like we may just not be 
calling that function to create the response control when one is in the 
grace period.

-NGK
> Thanks!
>
> Duke