Security

libbi_fletcher

Well Known Member
I think that maybe we are missing a set up somewhere. Password Change
Frequency is set to 30 days. If a user changes their password because it
has expired, the next day, it takes the old one, not the new one. Then when
they enter the old one, the following day it says it is expired again. Where
is this set up wrong? It is too strange.

XE Update 3 17.1 AS400 NT W2K Citrix XP

Libbi Fletcher
HoMedics, Inc.
M.I.S. Department
248-863-3001 ext. 1281
[email protected]
 
Are they responding to a warning of expiration, or an expiration notice?
 
The problem is that with SP >19 (I think it is 19) there is no warning
message displayed if the password has been used the last ten times. The
system appears to have accepted it, when in fact it has not..The old
password was never changed.
We experienced the same issue, and when we went to SP19.1 (from SP16),
the user's now receive an error message alerting them to this.

John

----------------------------------------------------------
OneWorld Xe (B733.3)
Update 6, SP 19.1_B1
Running on: WIN2K/SP2, SQL2k/SP2
Metaframe 1.8a
----------------------------------------------------------





Xe, Update2, SP16
SQL2k, Win2k
Metaframe 1.8a
 
I saw something lie this at an earlier SP level where the users would
change their password but the old one would still be effective... the
password never really changed. We had to use Administrative Password
revisions to change people passwords for them.

Is this also happening when a user changes their password BEFORE it expires
as well? Or just when it expires?

Regards,
Gerald




libbi_fletcher
<libbi.fletcher@ho To: Gerald Kastanek/Toronto/IBM@IBMCA
medics.com> cc:
Sent by: Subject: Security
owner-jdelist@jdel
ist.com


10/03/2002 05:15
PM
Please respond to
jdelist





I think that maybe we are missing a set up somewhere. Password Change
Frequency is set to 30 days. If a user changes their password because it
has expired, the next day, it takes the old one, not the new one. Then
when
they enter the old one, the following day it says it is expired again.
Where
is this set up wrong? It is too strange.
XE Update 3 17.1 AS400 NT W2K Citrix XP
Libbi Fletcher
HoMedics, Inc.
M.I.S. Department
248-863-3001 ext. 1281
[email protected]
--------------------------
 
Yes, three days in a row. Then it takes the old password, not the new one.
We are on 17.1. any ideas?

Libbi Fletcher
HoMedics, Inc.
M.I.S. Department
248-863-3001 ext. 1281
[email protected]
 
It is my understanding that it is just when it expires. She has been asked
to change it 3 days in a row.

Libbi Fletcher
HoMedics, Inc.
M.I.S. Department
248-863-3001 ext. 1281
[email protected]
 
Re: RE: Security

Its a history problem, as stated before in this thread which I spotted this a while ago.

If you change your password to a password which has already been used the system ignores it, and therefore uses the old one, and because it has expired requests a new one.

There is a history table you can clear, but I can't remember what its called. Make sure your users password is a completely new one.

Regards
 

Similar threads

Back
Top