[Anthill-pro] LDAP Authentication Realm - Updating username / password

[Lanser, Peter]

Hi,

we are managing our users in an LDAP Authentication Realm. I was surprised when I noticed that those users can update their username / password.

So I tried to update my username and my password. Changing the password seems to be impossible. AHP always brings up the error message "The existing password did not match the supplied password." although I'm pretty sure the passwords did match.

Changing the username works. But it's impossible to logon again. When using the updated username AHP states "Invalid login, please try again" - I expected that. When using the old user (LDAP lookup should return a valid result) AHP shows the following message (without stacktrace): IllegalStateException: com.urbancode.anthill3.domain.security.Role: Persistent IDs cannot be changed once set

Does it make sense to allow LDAP users to update their username/password? Am I missing something?

We are using AHP 3.5.3_14575.

BTW: The administrator can resolve this conflict by editing the user's profile (System - Users - <Realm> - <Updated Username>).

Regards,
Peter