Hello,

I try to test renaming of user objects. I start with user bob and I'm
able to kinit just fine:

        # echo BobPassword123 | kinit bob
        Password for b...@example.test: 
        #

I then rename the user:

        # echo Password123 | kinit admin
        Password for ad...@example.test: 
        # ipa user-mod --rename=bob1 bob
        ------------------------
        Modified user "bob"
        ------------------------
          User login: bob1
          First name: Robert
          Last name: Chase
          Home directory: /home/bob
          Login shell: /bin/sh
          Email address: b...@example.test
          UID: 251800001
          GID: 251800001
          Account disabled: False
          Password: True
          Member of HBAC rule: allow_wikiapp
          Kerberos keys available: True

And I try to kinit with the original password and it fails:

        # echo BobPassword123 | kinit bob1
        Password for b...@example.test: 
        kinit: Password incorrect while getting initial credentials
        #

Then I rename the user back and the original password starts to work
again:

        # echo Password123 | kinit admin
        Password for ad...@example.test: 
        # ipa user-mod --rename=bob bob1 
        --------------------
        Modified user "bob1"
        --------------------
          User login: bob
          First name: Robert
          Last name: Chase
          Home directory: /home/bob
          Login shell: /bin/sh
          Email address: b...@example.test
          UID: 251800001
          GID: 251800001
          Account disabled: False
          Password: True
          Member of HBAC rule: allow_wikiapp
          Kerberos keys available: True
        # echo BobPassword123 | kinit bob
        Password for b...@example.test: 
        #

Is this expected? It's with 4.1.0.

-- 
Jan Pazdziora
Senior Principal Software Engineer, Identity Management Engineering, Red Hat

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to