SWS 1.3 and mixed-case passwords

[Willem Grooters]

I came accross a potential problem with SWS 1.3 (1.3-1, eventually). To be more precise: the MOD_AUTH_OPENVMS module.

A customer has set up his systems to allow mixed-case passwords on login (due to security policy). This was their reason for using OSU instead of SWS - something had to be done but when asking, they got a very quick reply on how to set things up (requests on the issue sent to HP has not been answered (according the customer)).

So the problem is: CAN mixed case passwords with SWS 1.3 (actually: any version) and if something has to be set up: what and how? The documentation doesn't state anything on this either.

(If SWS 2.1 would not have a problem in this: nice to know but upgrade is NO option for the moment. Nor is moving to WASD (or any other server).

[Volker Halle · Accepted solution]

Willem,

from SWS V1.3-1 Release Notes:

Known Problems and Restrictions

- mod_auth_openvms does not recognize the PWDMIX flag in the SYSUAF.DAT file
The module mod_auth_openvms does not recognize the PWDMIX flag in the SYSUAF.DAT file.
A user with an account that has PWDMIX set cannot be authenticated correctly unless the
password is all uppercase.

http://h71000.www7.hp.com/openvms/products/ips/apache/csws_relnotes.pdf

Volker.

[Volker Halle]

Willem,

ATW 9693 seems to ask for a call to HP, if mixed case passwords don't work...

http://h71000.www7.hp.com/wizard/wiz_9693.html

Volker.

[Willem Grooters]

WHY issue a call? This is a bug (not a feature). It should have been solved in subseqeunt release if it is a known issue!