-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
rhel-10.1
-
None
-
None
-
Moderate
-
rhel-idm-ds
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Unspecified
-
Unspecified
-
Unspecified
-
None
Setting password history count to 0 should flush all passwords stored in the history
Package version:
389-ds-base-3.1.3-5.el10_1.x86_64
Steps to reproduce
- Enable global password history
- Set password history count to e. g. 2,
- Fill a user's password history with values, e.g. password1, password2
- Set password history count to 0 - only current password is blocked (e. g. password3)
- Set password history count to 2 again
- Check that any of the older passwords (password1, password2) are still usable
Expected results
It should be possible to set both password1 and password2, but not password3 (current password)
Actual results
Both password1 and password2 are blocked, the history is still populated by original values before changing password history count to 0
Additional info
Only applies to setting password history count to 0. Other cases (e.g. 3 -> 2) work properly.
- links to