Came upon this thread when trying to find a solution for this exact issue
we are facing right now. LDAPs cannot have password history policies
because of this. It seems rather than using a dummy password first time, it
uses the same password. We'll have to explore why it's done this way.

On Tue, Mar 11, 2014 at 1:28 AM, Amila Maha Arachchi <[email protected]>
wrote:

> What are the issues of having this?
>
>
> On Thu, Mar 6, 2014 at 9:08 AM, Danushka Fernando <[email protected]>
> wrote:
>
>> Hi all
>> I found that our tenant creation process is calling reset password call
>> inside tenant creation process.
>> When we call tenant creation it goes through *persistTenant* call in
>> *TenantPersistor* class. And it calls *persistTenantInUserStore*. In the
>> end of this call it calls for *updateTenantAdminPassword*.
>>
>> By the time Tenant Manager is created the tenant admin and have added the
>> password to the LDAP.
>>
>> So is there a particular reason that we should do this?
>>
>> I cant see any reason that we call the update/reset password at this
>> moment. So IMO we should remove this if no such reason. WDYT?
>>
>>
>> Thanks & Regards
>> Danushka Fernando
>> Software Engineer
>> WSO2 inc. http://wso2.com/
>> Mobile : +94716332729
>>
>
>
>
> --
> *Amila Maharachchi*
> Senior Technical Lead
> WSO2, Inc.; http://wso2.com
>
> Blog: http://maharachchi.blogspot.com
> Mobile: +94719371446
>
>
> _______________________________________________
> Dev mailing list
> [email protected]
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>


-- 
Dulanja Liyanage
WSO2 Inc.
M: +94776764717
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to