Pre-expired password accounts not prompting for change

[Mike Kier]

V7.3-2 patched current, Multinet 4.4

I'm not sure when this started, but now when I create a new user account using Authorize by copying an existing account using the syntax

copy olduser newuser/uic=[xxx,yyy]/pass=password/pwdexp

the new user does not get prompted for a password change and can in fact login and out repeatedly without changing.

Only FLAGS are DisCtlY and DefCLI.

Any ideas? Other information needed to diagnose?

Mike

[Kris Clippeleyr · Accepted solution]

Hi Mike,
If for the account there is no "password lifetime" ( /NOPWDLIFETIME ), the user is indeed not prompted to change her/his password.
Regards,
Kris (aka Qkcl)

[Hein van den Heuvel]

/PWDLIFETIME=NONE ?


Hein.

[Hoff]

Did somebody modify the DEFAULT account?

[Dean McGorrill]

The Pwdlifetime is sticky with the copy. if
the old user had none, so does the newuser.

[Mike Kier]

Kris, Hein, and Dean all nailed it.

The accounts in question were all copied from a user with a PWDLIFE of (None).

The DEFAULT account is not used here - they have several different classes of users for different application profiles and they clone the accounts for each from another user with a similar profile - the same could (and should) be done with a template default for each profile rather than a live user - now on my list of "projects."

Chasing down why I had a user being used as the source of the cloning with no password lifetime and checking to see if there are any others is a slightly higher priority.

Thanks folks!
Mike

[Mike Kier]

See previous