Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-12050

Password error message not specific

    Details

    • Target Version/s:
    • Rank:
      1|hzpmcf:
    • Sprint:
      AM Sustaining Sprint 46, AM Sustaining Sprint 47
    • Story Points:
      5
    • Support Ticket IDs:

      Description

      environment:

      13.5.1

       

      issue background:

      In the previous version, for any violations of the password policy for the new password, the error message received was same as the error message received from OpenDJ. But, with the new OpenAM version, the error message seems to be getting modified and for all violations same message is returned by OpenAM.

      Eg: When the new password had only lower case password - The error message received from the rest api was -

      The provided password value was rejected by a password validator: The provided password did not contain enough characters from the character set 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'. The minimum number of characters from that set that must be present in user passwords is 1

      Now, the error message we get after upgrading to 13.5.1 is - The password did not meet the password policy requirements

       

      business impact: show clear errors to user as to what is the problem with the password,

       

        Attachments

          Issue Links

          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. OPENAM-11415 LDAP Authentication module should return password policy error returned by the LDAP server

          • Major - Major loss of function.
          • Closed
          is related to

          New Feature - A new feature of the product, which has yet to be developed. OPENAM-9009 When using REST endpoint "json/users/?_action=create" with password policy violation, AM returns HTTP 400 "bad request", reason "Bad Request" , Message "Bad Request" rather than a more meaningful error message

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-16402 The passwordpolicy.allowDiagnosticMessage should be applicable to admin and selfservice password change.

          • Major - Major loss of function.
          • Closed

            Activity

              People

              • Assignee:
                sachiko Sachiko Wallace
                Reporter:
                jobby.thomas Jobby Thomas
              • Votes:
                0 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: