Re: User's password expiring unexpectedly

[DougB aka 6423241]

bkemp1,

>
> This is only happening to one user (as far as I know). DS Repair shows
> no errors.
>
> I'm not sure if the expiration date changes, I'll check next time. I
> know that I have manually set the expiration date, only to have the
> password expire the next day (the date I set was 90 days in the future).
>

That's not surprising, as you cannot override the policy this way. You
can make a user's settings *more* restrictive than the policy via C1 or
iManager (shorter expiration, say) but not less.

Just to see what happens, you might create a new U.P. policy and apply
it only to that user.

HTH

[David Gersic]

On Wed, 14 Jul 2010 13:36:02 +0000, bkemp1 wrote:

> I have one user that is having password problems. Her password seems to
> expire every day, and her grace logins run out. We have a universal
> password policy in place, so manually setting up her password
> requirements via consoleone does not work. Is there something I can do?

Is her password being reset? That would force expiration of the password.

Have her log out. Look in iMonitor to see what the password expiration,
grace login remaining, and password last set attributes are.

Have her log in. Assuming her login shows a "expired password", have her
change her password to something new. Then look in iMonitor to see what
password expiration, grace login remaining, password last set are.

Have her log out. Look at iMonitor again.

Somewhere around one of these will show where things are going wonky.

--
---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Novell Knowledge Partner http://forums.novell.com

Please post questions in the newsgroups. No support provided via email.

[David Gersic]

On Thu, 15 Jul 2010 11:41:17 +0000, Edward van der Maas wrote:

> bkemp1 wrote:
>
>
>> I have one user that is having password problems. Her password seems
>> to expire every day, and her grace logins run out. We have a universal
>> password policy in place, so manually setting up her password
>> requirements via consoleone does not work. Is there something I can
>> do?
>

> The expiry date for a password should still work.

With UP in place, changing the password expiration time in ConsoleOne
(ie: the eDirectory attribute) only works if you're making the password
expire _sooner_ than the UP policy says it should. If you try to make it
expire _after_ the UP policy says, NMAS will simply "fix" it for you back
to what the policy says it should be.

[David Gersic]

On Thu, 15 Jul 2010 18:46:01 +0000, bkemp1 wrote:

> This is only happening to one user (as far as I know). DS Repair shows
> no errors.

dsrepair is not called for here.

> I'm not sure if the expiration date changes, I'll check next time. I
> know that I have manually set the expiration date, only to have the
> password expire the next day (the date I set was 90 days in the future).

Note that you _cannot_ set the password expiration date beyond what NMAS
calculates the password change date to be (password last changed date +
password policy expiration interval).

[Peter Kuo]

Does it happen to just this ONE user? Have you checked the DS sync status?

--

Peter
eDirectory Rules!
http://www.DreamLAN.com

[Edward van der Maas]

bkemp1 wrote:

>
> I have one user that is having password problems. Her password seems
> to expire every day, and her grace logins run out. We have a
> universal password policy in place, so manually setting up her
> password requirements via consoleone does not work. Is there
> something I can do?

The expiry date for a password should still work. When the user updates
his/her password does the expiry date actually change ?

--
Cheers,
Edward