topic Re: Pre-expired password accounts not prompting for change in Operating System - OpenVMS

Pre-expired password accounts not prompting for change

Mike Kier — Wed, 02 May 2007 08:30:38 GMT

V7.3-2 patched current, Multinet 4.4

I'm not sure when this started, but now when I create a new user account using Authorize by copying an existing account using the syntax

copy olduser newuser/uic=[xxx,yyy]/pass=password/pwdexp

the new user does not get prompted for a password change and can in fact login and out repeatedly without changing.

Only FLAGS are DisCtlY and DefCLI.

Any ideas? Other information needed to diagnose?

Mike

Re: Pre-expired password accounts not prompting for change

Kris Clippeleyr — Wed, 02 May 2007 08:50:53 GMT

Hi Mike,
If for the account there is no "password lifetime" ( /NOPWDLIFETIME ), the user is indeed not prompted to change her/his password.
Regards,
Kris (aka Qkcl)

Re: Pre-expired password accounts not prompting for change

Hein van den Heuvel — Wed, 02 May 2007 08:52:29 GMT

/PWDLIFETIME=NONE ?

Hein.

Re: Pre-expired password accounts not prompting for change

Hoff — Wed, 02 May 2007 09:29:02 GMT

Did somebody modify the DEFAULT account?

Re: Pre-expired password accounts not prompting for change

Dean McGorrill — Wed, 02 May 2007 12:55:59 GMT

The Pwdlifetime is sticky with the copy. if
the old user had none, so does the newuser.

Re: Pre-expired password accounts not prompting for change

Mike Kier — Wed, 02 May 2007 13:07:50 GMT

Kris, Hein, and Dean all nailed it.

The accounts in question were all copied from a user with a PWDLIFE of (None).

The DEFAULT account is not used here - they have several different classes of users for different application profiles and they clone the accounts for each from another user with a similar profile - the same could (and should) be done with a template default for each profile rather than a live user - now on my list of "projects."

Chasing down why I had a user being used as the source of the cloning with no password lifetime and checking to see if there are any others is a slightly higher priority.

Thanks folks!
Mike

Re: Pre-expired password accounts not prompting for change

Mike Kier — Wed, 02 May 2007 13:08:40 GMT

See previous