HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
Operating System - OpenVMS
cancel
Showing results for 
Search instead for 
Did you mean: 

DECwindows screen lock and PWDMIX

 
Galen Tackett
Valued Contributor

DECwindows screen lock and PWDMIX

In AUTHORIZE I have set /FLAG=PWDMIX for my acccount, and I set a password that has a period in the middle.

Now, if the DECwindows session lock activates (by clicking the lock button or due to inactivity) I can't unlock it! It tells me my password is invalid and generates a security audit. Yet I am able to log in elsewhere with exactly the same password. (The status show in the audit is %LOGIN-F-INVPWD.)

I have found that I can temporarily fix this by resetting my password via AUTHORIZE. This works even if I set it to the same password I was already using. Yet once the screen lock activates, the problem happens all over again.

I am running VMS V7.3-2 and DECwindows V1.3-1 with all the ECOs that were available as of about May 14th.

Maybe the DECwindows screen lock is getting tripped up by examining the password itself, rather than letting VMS do this?
5 REPLIES
Willem Grooters
Honored Contributor

Re: DECwindows screen lock and PWDMIX

Sounds a bug to me. It wouldn't mind on what screen the password is entered, and checks should be done against UAF (using VMS routines, obviously).
Perhaps the period in the middle isn't counted as valid?

Willem
Willem Grooters
OpenVMS Developer & System Manager
Ian Miller.
Honored Contributor

Re: DECwindows screen lock and PWDMIX

I have a vague memory that this is a known bug but you will have to ask hp to be sure.
____________________
Purely Personal Opinion
Galen Tackett
Valued Contributor

Re: DECwindows screen lock and PWDMIX

Sigh...

I only wish we had a software contract so that I could report it to HP officially.

As it is we're waiting on government people who manage ours, and from my perspective (rather far removed, I admit) they seem less than infinitesimally interested in doing anything.
David Jones_21
Trusted Contributor

Re: DECwindows screen lock and PWDMIX

Doesn't appear to be a problem in VMS 8.2.
I'm looking for marbles all day long.
Galen Tackett
Valued Contributor

Re: DECwindows screen lock and PWDMIX

I don't have access to the patch yet but will check on V8.2 to see if it's okay there.