Password Policy: Warning Time notification (password expration time, grace limit)

Description

We want passwords to expire, but we don't want users to be forced to set a new password in warning time:

Step to reproduce:

1. Log as admin
2. Create a new Password Policy
On the dock bar --> Go to --> Contol Panel --> Password Policies --> Add
Fill the name: "test"
Check in the Expiration Enable
Set Maximum Age to 2 Weeks
Set Warning time to 1 Week
Set Grace Limit to 0
Save
3. Create a new User: test2
Users and Organizations --> Add --> User
Screen Name: test2
Email Address: test2@liferay.com
First Name: test2
Middle Name: test2
Last Name: test2
Save
Password
New Password: test
Enter again: test
Save
4. Assign the test2 user to the test password policy
Password Policies
Select the test action's button --> Assign Members --> Select the available tab --> check the "test2 test2 test2" user --> Update Assiciations
5. Sign in with test2 user
6. Stop Liferay server
7. Set the computer date to this day +8 days
8. Start Liferay and try to login with test2

Problem:
No warning message and test2 must to change his password!
Expected behaviour:
Warning message

9. Stop liferay
10. Set the computer date to this day +15 days
11. Try to login with test2

Normal behaviour: test2 must change his password.

12. Edit the "test" Password Policy and set the grace to: 2

13. Try to login with "test2" user with more than 2 times (check the database users_ table graceLoginCount column)
Expected behaviour:
Authentication failed. Password expired error message.

Activity

Show:

Luyang TanJanuary 16, 2013 at 12:38 AM

PASSED Manual Testing following the steps in the description.

Fixed on:
Tomcat 7.0 + MySQL 5. Portal 6.0.x GIT ID: 9641c079a29bcbff9334c926992e3997a6f63c8c.

I can see the warning message when I set the computer date to this day +8 days,
I can see the expired message when I set the computer date to this day +15 days,
I can login in first two times when I set the grace to: 2, but I will get the expird message when the third time.

Michael SaechangJanuary 15, 2013 at 10:50 AM

Ticket backported to 6.0.x.

Luyang TanAugust 23, 2012 at 1:52 AM
Edited

PASSED Manual Testing following the steps in the description.

Reproduced on:
Tomcat 7.0 + MySQL 5. Portal 6.0.1 CE GA1.

I can not see the warning message when I set the computer date to this day +8 days,
when I set the grace to: 2, I can not login the first time.

Fixed on:
Tomcat 7.0 + MySQL 5. Portal 6.1.x EE GIT ID: 12d6f070f68b9b25f71783de416fcb7a9c7696f5.
Tomcat 7.0 + MySQL 5. Portal 6.2.x GIT ID: c2f842ff28babeb82ffa77d3d8636f185a69c954.

I can see the warning message when I set the computer date to this day +8 days,
I can see the expired message when I set the computer date to this day +15 days,
I can login in first two times when I set the grace to: 2, but I will get the expird message when the third time.

Fixed

Details

Assignee

Reporter

Branch Version/s

6.1.x
6.0.x

Backported to Branch

Committed

Fix Priority

3

Git Pull Request

Components

Priority

Zendesk Support

Created March 9, 2012 at 3:49 AM
Updated June 24, 2023 at 3:55 PM
Resolved January 14, 2013 at 6:11 PM
Loading...