Feature #19458

Add the ability to expire passwords after a configurable number of days

Added by Holger Just about 3 years ago. Updated almost 3 years ago.

Status:ClosedStart date:
Priority:NormalDue date:
Assignee:Jean-Philippe Lang% Done:

0%

Category:Accounts / authentication
Target version:3.1.0
Resolution:Fixed

Description

This patch adds the ability to configure a number of days after which user's passwords should expire. It uses the recently introduced User#passwd_changed_on field. The user-visible end result is the same as if an administrator had manually marked a user with must_changed_passwd.

This patch is against current trunk (r14155) including tests. It was extracted from Planio where we developed this patch for a customer.

This patch might be related to #3155, although this is not directly mentioned there.

0001-Allow-to-specify-maximum-password-age.patch Magnifier (5.57 KB) Holger Just, 2015-03-23 19:05

expiration_message_example.png (26.1 KB) Go MAEDA, 2015-03-24 09:55

0002-Allow-to-specify-maximum-password-age.patch Magnifier - Add error message (6.03 KB) Go MAEDA, 2015-04-02 09:10


Related issues

Related to Redmine - Feature #3155: Password policy and secure logon procedure New 2009-04-10

Associated revisions

Revision 14264
Added by Jean-Philippe Lang almost 3 years ago

Add the ability to expire passwords after a configurable number of days (#19458).

Patch by Holger Just and Go MAEDA.

History

#2 Updated by Go MAEDA about 3 years ago

  • Related to Feature #3155: Password policy and secure logon procedure added

#3 Updated by Go MAEDA about 3 years ago

The feature sounds good. I have applied the patch and works fine.

It would be great if there is password expiration message like the following example. I am worried that some users will get confused without a message like this.

#4 Updated by Go MAEDA about 3 years ago

Updated the patch.
Added a error message: "Your password has expired or the administrator requires you to change it."

#5 Updated by Go MAEDA about 3 years ago

  • Target version set to Candidate for next major release

#6 Updated by Go MAEDA almost 3 years ago

  • Target version changed from Candidate for next major release to 3.1.0

Could it be included in next version?

#7 Updated by Jean-Philippe Lang almost 3 years ago

  • Tracker changed from Patch to Feature
  • Status changed from New to Closed
  • Assignee set to Jean-Philippe Lang
  • Resolution set to Fixed

Patch committed in r14264, thanks!

#8 Updated by Go MAEDA almost 3 years ago

  • Status changed from Closed to Reopened

Thanks for merging the patch!
Please add strings to locales.

#9 Updated by Jean-Philippe Lang almost 3 years ago

  • Status changed from Reopened to Closed

Strings added.

Also available in: Atom PDF