Task #2783
closed
Add configuration of login prefixes to be skipped
100%
Description
I'd like to have a way to configure a set of login prefixes to be skipped from both validation of password and notify action in the password filter library.
If the password filter is invoked for a login that starts with one of these prefixes the library won't even init the connection to CzechIdM, just log the login and skip everything else.
E.g. I want to skip all "password changes" of users with login that starts with "HealthMailbox".
Updated by Ondřej Kopr almost 3 years ago
- Assignee changed from Ondřej Kopr to Ondrej Husník
Updated by Ondrej Husník almost 3 years ago
- Status changed from New to In Progress
- % Done changed from 0 to 80
Currently used approach to skipping password change for some accounts has been changed. So far there were skipped password policy validation and IdM notification for accounts which started with any of reserved characters specified with the string value of the item forbiddenInitChars. But only the first character of the account was tested. Now there can be specified whole strings as reserved ones. The previous configuration item forbiddenInitChars has been replaced with skippedAccPrefix and is not supported anymore. This new item has to be set as an array of strings. The account tested with respect to case sensitivity.
Updated by Ondřej Kopr almost 3 years ago
- Status changed from In Progress to Resolved
- % Done changed from 80 to 100
Reserved string works perfectly even for czech characters like 'ěščř'.
The feature isn't fully backward compatible, but is only minor thing in config file.
Updated by Ondrej Husník almost 3 years ago
- Status changed from Resolved to Closed