yahoo-eng-team team mailing list archive

[Mahesh Sawaiker <mahesh_sawaiker@xxxxxxxxxxxxxxxx>]

Public bug reported:

We are using a password policy in ldap that locks accounts if they try
authenticating with a wrong password more than certain number of times.

When an account is locked, the Horizon UI shows Invalid
username/password.

Following is the change i made to get what I wanted, but we need
something more generic and configurable (example easily allow user to
know his password has expired, based on the response coming from the
keystone client)


vim "/usr/lib/python2.6/site-packages/openstack_auth/backend.py" -
changes on line 98 and 99

 94         except (keystone_exceptions.Unauthorized,
 95                 keystone_exceptions.Forbidden,
 96                 keystone_exceptions.NotFound) as exc:
 97             msg = _('Invalid user name or password.')
 98             if exc.message == "Error, Account is locked":
 99                 msg = "Error, Account is locked contact the administrator"

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1365458

Title:
  Keystone auth needs a way to propogate some error message based on
  some kind of configuration

Status in OpenStack Identity (Keystone):
  New

Bug description:
  We are using a password policy in ldap that locks accounts if they try
  authenticating with a wrong password more than certain number of
  times.

  When an account is locked, the Horizon UI shows Invalid
  username/password.

  Following is the change i made to get what I wanted, but we need
  something more generic and configurable (example easily allow user to
  know his password has expired, based on the response coming from the
  keystone client)


  vim "/usr/lib/python2.6/site-packages/openstack_auth/backend.py" -
  changes on line 98 and 99

   94         except (keystone_exceptions.Unauthorized,
   95                 keystone_exceptions.Forbidden,
   96                 keystone_exceptions.NotFound) as exc:
   97             msg = _('Invalid user name or password.')
   98             if exc.message == "Error, Account is locked":
   99                 msg = "Error, Account is locked contact the administrator"

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1365458/+subscriptions