Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-2962

Password Complexity Message for Remote Directories ( Open LDAP / AD etc )

    • 12
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      https://jira.atlassian.com/browse/CWD-2835 implemented a configuration for password complexity message for Internal Directory(hand to hand with passwordRegex).

      As mbeaucha points ot in https://jira.atlassian.com/browse/CWD-2835?focusedCommentId=409130&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-409130 we need to investigate how to add this functionality with LDAP / AD.

      Quick googling points out we could get the message from AD (ntSecurityDescriptor). Not sure about OpenLDAP.

            [CWD-2962] Password Complexity Message for Remote Directories ( Open LDAP / AD etc )

            SET Analytics Bot made changes -
            Support reference count New: 12
            Katherine Yabut made changes -
            Workflow Original: JAC Suggestion Workflow [ 3388285 ] New: JAC Suggestion Workflow 3 [ 3630060 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: Simplified Crowd Development Workflow v2 [ 1392175 ] New: JAC Suggestion Workflow [ 3388285 ]
            Issue Type Original: Improvement [ 4 ] New: Suggestion [ 10000 ]
            Status Original: Verified [ 10005 ] New: Under Consideration [ 11774 ]

            Could you please provide an update for this issue? This is very confusing for our customers

            Florian Schmied added a comment - Could you please provide an update for this issue? This is very confusing for our customers
            James Richards made changes -
            Remote Link New: This issue links to "Page (Atlassian Documentation)" [ 373194 ]
            vkharisma made changes -
            Link New: This issue relates to CONFCLOUD-34742 [ CONFCLOUD-34742 ]

            This issue has been created almost four years ago but did not receive any public update from Atlassian yet.

            Currently, external users can reset their passwords via JIRA / Confluence which are connected to Crowd which is connected MS Active Directory. This has to be done since our Crowd server is not publicly accessable.

            We are hit by the issue that no proper error message is printed. If a customer enters a weak password, he gets an ugly error message like this directly on the set password screen (e.g. in JIRA):

            Error from Crowd server propagated to here via REST API (check the Crowd server logs for details): org.springframework.ldap.OperationNotSupportedException: [LDAP: error code 53 - 0000052D: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0
            ]; nested exception is javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000052D: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0
            ]; remaining name 'cn=Test User,ou=users,ou=Test,dc=ad,dc=mycompany,dc=com'
            

             This confuses the customer since they don't know what has gone wrong. The message does not imply that the entered password was too weak according to the password policy defined in Active Directory.

             

            So can someone from Atlassian please give an update on this issue?

            Deleted Account (Inactive) added a comment - This issue has been created almost four years ago but did not receive any public update from Atlassian yet. Currently, external users can reset their passwords via JIRA / Confluence which are connected to Crowd which is connected MS Active Directory. This has to be done since our Crowd server is not publicly accessable. We are hit by the issue that no proper error message is printed. If a customer enters a weak password, he gets an ugly error message like this directly on the set password screen (e.g. in JIRA): Error from Crowd server propagated to here via REST API (check the Crowd server logs for details): org.springframework.ldap.OperationNotSupportedException: [LDAP: error code 53 - 0000052D: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0 ]; nested exception is javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000052D: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0 ]; remaining name 'cn=Test User,ou=users,ou=Test,dc=ad,dc=mycompany,dc=com'  This confuses the customer since they don't know what has gone wrong. The message does not imply that the entered password was too weak according to the password policy defined in Active Directory.   So can someone from Atlassian please give an update on this issue?
            Rudy Slaiby made changes -
            Affects Version/s New: 2.8.3 [ 53696 ]
            Owen made changes -
            Workflow Original: Crowd Development Workflow v2 [ 444474 ] New: Simplified Crowd Development Workflow v2 [ 1392175 ]
            Monique Khairuliana (Inactive) made changes -
            Link New: This issue is duplicated by CWD-4027 [ CWD-4027 ]

              Unassigned Unassigned
              akunday ArvindA
              Votes:
              20 Vote for this issue
              Watchers:
              14 Start watching this issue

                Created:
                Updated: