-
Bug
-
Resolution: Unresolved
-
Medium
-
None
-
5.1.2, 6.7.3, 6.13.0
-
6
-
Severity 2 - Major
-
4
-
When a Crowd User Directory is set up to have a password regex and then linked to Confluence, no feedback is given at all when attempting to create a new user via email invitation or via self-signup, and if you attempt to change an existing users password to something that doesn't meet the regex you are given a stacktrace.
Steps to Reproduce:
- Configure a Crowd directory to have a password regex (under the configuration tab)
- Set up Confluence to have this Crowd directory at the top of your directories list, so users are added to this directory upon creation
- Allow for self-signup or email a user invitation
- Note that if you attempt to create an account which fails the password regex, absolutely no feedback is given. An error is shown in the logs, however.
- Alternatively, create a user with a valid password, then attempt to change that password for the user. This will result in the following:
Notes:
- If you attempt to add a user via 'Add a User', you are given an error message (which reads 'The following error(s) occurred: Failed to create the user 'disabler'. Check your server logs for more information.')
- If the user changes their own password, they are shown the following error message: 'The new password you entered is invalid.'
- relates to
-
CWD-3171 Password complexity requirement message is not displayed
- Closed