When basicAuth is enabled, users with expired account passwords cannot perform any CIM requests. Create a configure option to allow users with expired passwords to update their account password via a CIM request. If enabled, only this single CIM request will be able to be performed by the expired user.
Once the password is updated, the user will then be able to pass the auth check, and can continue making requests as normal.
committed patch (1.3 branch)
committed to CVS HEAD and git master