OPENDJ-1917: User can search using resetted password when force-change-on-r...

Yannick Lecaillez

26.24.2015 b3a00ec524976042e097c32f349e1281216b44d9

OPENDJ-1917: User can search using resetted password when force-change-on-reset is enabled.

 opendj-server-legacy/src/main/java/org/opends/server/extensions/PasswordModifyExtendedOperation.java

@@ -775,7 +775,7 @@
      // If the password was changed by an end user, then clear any reset flag that might exist.
      // If the password was changed by an administrator, then see if we need to set the reset flag.
      pwPolicyState.setMustChangePassword(
          selfChange && pwPolicyState.getAuthenticationPolicy().isForceChangeOnReset());
          !selfChange && pwPolicyState.getAuthenticationPolicy().isForceChangeOnReset());

      // Clear any record of grace logins, auth failures, and expiration warnings.
      pwPolicyState.clearFailureLockout();