DS core server provides a default plugin (passwd_modify_extop) to handle 1.3.6.1.4.1.4203.1.11.1 extended op (https://www.ietf.org/rfc/rfc3062.txt) The pluginprecedence of the passwd_modify_extop is 50 (default value)
In Freeipa deployment, the delivered ipa_pwd_extop plugin should hanlde that extended op in place of the default DS plugin.
Currently those two plugins have the same precedence, so ipa_pwd_extop was called by chance because it was registered after passwd_modify_extop. To be sure we have the right precedence we need to set it
attachment 0001-Make-sure-ipapwd_extop-takes-precedence-over-passwd_.patch
Thierry, if 4.3 is affected then please move to 4.3.2 milestone.
master:
ipa-4-3:
Metadata Update from @tbordaz: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.3.2
Login to comment on this ticket.