Bug #1485
closed
WebUI password changes do not change shell and VPN passwords
100%
Description
Version:
2.0-RC1 (amd64)
Goal:
Have user accounts that only work for IPSec VPN access. And allow the user to change their own password.
Setup:
IPSec mobile client VPN is working for admins with local user accounts, using PSK + Xuath. I created a test user who is only a member of the "vpnusers" group. The vpnusers group has Shell Access to work around bug 1202, and User Manager privileges that work as described in bug 319.
Issue:
When a user logs into the web interface they are given the "System: User Password" that allows them to change their password. When a user sets their password on that page it changes their WebUI password, but not their shell and VPN password. If an admin manipulates the account, e.g., disabling then enabling the account, the passwords are synced to what the user set.
Expected Behavior:
When a user changes their password I expect it to change all their passwords.
Updated by Jim Pingle about 14 years ago
I committed an ipsec xauth permission for users to fix #1202 a couple weeks ago, you should be using that instead.
A commit is coming to fix this bug though, it wasn't syncing the OS password in this case.
Updated by Jim Pingle about 14 years ago
- Status changed from New to Feedback
- % Done changed from 0 to 100
Applied in changeset c639315e3c86ae6cc2a1d1030347340f340f8270.
Updated by Anton Cohen about 14 years ago
Thanks for quick fix! It works.
I updated to 2.0 RC1 built Fri Apr 29 21:19:09 EDT 2011. I changed the privileges of "vpnusers" to IPsec xauth Dialin and User Manager. Deleted the user account and re-added. I was able to login to the WebUI as the user and change the password, it changed the VPN password.
Updated by