Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Allow self service console to get more descriptive errors when changing password

Hi there,

We are using Crowd 4.2.2. We've set up a directory server to authenticate users using LDAP and enforcing password policy. 

I understand that for an internal directory, we can set up regex to validate the passwords against a set of rules that then gives the user the appropriate error if the password doesnt meet regex. However this isnt possible using external directory server - this is fine, except that, when the user's password does not meet LDAP password policy settings, the blanket error message "You do not have permission to change" is given instead of the actual errors stated in the log, ie :

2021-03-04 14:57:02,376 http-nio-8095-exec-12 ERROR [console.action.user.ChangePassword] When changing the user password
com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.InvalidAttributeValueException: [LDAP: error code 19 - invalid password syntax - password must be at least 12 characters long]; nested exception is javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 19 - invalid password syntax - password must be at least 12 characters long]; remaining name 'uid=testuser,ou=test ou,dc=com,dc=au"

 

The "no permission to change" generic error is obviously misleading to users because it implies permission issue, not password requirement issue.

I notice as admin, when changing password for a user as administrator  via the Admin console (invoking console.action.principal.UpdatePrincipal in the background), when the password set for user does not meet requirement, it gives you the appropriate descriptive error matching the log.

How can I enable self service console to get the same descriptive logs? Any workaround/hacks??

 

Thanks!

Jane

 

 

0 answers

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Jira

Admins, notify your Jira instance of system-wide changes with the new admin announcement banner

Hi All! We’re excited to share the launch of an announcement banner that lets Jira site administrators communicate directly to their users across their  Jira Cloud instance.  ...

546 views 15 18
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you