Simple Interface expired password change prompt

We have a population of users who access GW exclusively through WebAcc. Some of this population has jumped on the mobile device bandwagon and so we've directed them to the simple interface when accessing GW from a mobile device.
Some of these mobile device users now exclusively use the simple interface on their tablet/phone to access GW and when their password is expired, are never presented with the password change dialogue.
Ive verified when user with an expired password navigates directly to the simple interface url , https://gwserver/gw/webacc?User.interface=simple, either on a mobile device or desktop browser, IE, FF, Chrome, the user consumes a grace login and is taken directly to the simple interface mailbox.
Resetting grace logins and navigating to the standard webacc interface the GW password change dialogue is presented as expected.
GroupWise 8.0.1 webacc on netware. I think wed refrained from going to newer releases in fear of some nasty bugs in the subsequent versions, but Ive not kept current on issues with the latest release.
I understand the next GW version with native mobile device templates is around the corner, but management may want to address this sooner.
Is this failure to recognize password expiry in the simple interface a know behavior?
Regards,
Fdiaz

On 8/8/2011 8:36 AM, vodobaas wrote:
> We have a population of users who access GW exclusively through WebAcc.
> Some of this population has jumped on the mobile device bandwagon and so
> we've directed them to the simple interface when accessing GW from a
> mobile device.
> Some of these mobile device users now exclusively use the simple
> interface on their tablet/phone to access GW and when their password is
> expired, are never presented with the password change dialogue.
>
> Ive verified when user with an expired password navigates directly to
> the simple interface url ,
> https://gwserver/gw/webacc?User.interface=simple, either on a mobile
> device or desktop browser, IE, FF, Chrome, the user consumes a grace
> login and is taken directly to the simple interface mailbox.
> Resetting grace logins and navigating to the standard webacc interface
> the GW password change dialogue is presented as expected.
> GroupWise 8.0.1 webacc on netware. I think wed refrained from going to
> newer releases in fear of some nasty bugs in the subsequent versions,
> but Ive not kept current on issues with the latest release.
> I understand the next GW version with native mobile device templates is
> around the corner, but management may want to address this sooner.
>
> Is this failure to recognize password expiry in the simple interface a
> know behavior?
>
> Regards,
> Fdiaz
I'll ask.

Similar Messages

Sybase expired password changed via JDBC ...

hi,
please help me in this matter : i can't figure out how to change an already expired password via Sybase JDBC implementation ( jConnect ).
i read the postings about Oracle having passed a custom value for this kind of change but i just don't seem to find a similar Sybase approach.
thank you very much,
-ionut-

I've never used Sybase, but here's a suggestion. I'm guessing you are already trying to call the sp_password stored procedure.
Try to call it using con.executeQuery(). Something along the lines of
con.executeQWuery("execute sp_password 'old','new';");
A lot of drivers make extra database calls when you use prepareCall() and prepareStatement().

Expired password change

it says my password has expired so i go to change it by typing in my old password and a new one but it doesnt let me the screen just shakes
please help!

I am not sure If I am allowed to post links but here is how you can reset your password on almost every MAC
http://osxdaily.com/2010/08/10/forgot-mac-password-how-to-reset-mac-password/

How to change setting for 'last 5 password change prompt'

hi friends
in sap, when a user changes a password sometimes he/she gets a message "Please select a password that is different from last 5".
now i am in need to change this default value of "5" to "2" but i dont know what is the parameter name for changing this setting.
i would appreciate if anybody can tell me how to change this setting.
many thanks
regards

Hi nathan drake
The parameter for password history is login/password_history_size = 5
you can change to 2.
Regards,
Firoz.

OWA 2013 Expired Password Change - not working

We are in the process of moving mailboxes from our 2010 environment to our 2013 environment and are using the 2013 CAS as internet facing, for any mailboxes on 2010, requests are proxied through.
We have the registry DWORD ChangeExpiredPasswordEnabled set to 1 in HKLM\SYSTEM\CurrentControlSet\Services\MSExchange OWA but this isn't working.
It use to work perfectly well when we had the 2010 CAS server internet facing.
Is this still supported in Exchange 2013?

I opened up a case with Microsoft and we've done 2 things, not sure which has fixed it.
1) On the password policy for the domain, set the min password age as 0 days (previously set as 1)
2) On the CAS server, under IIS, Default Websit, OWA, Authentication and on Basic Authentication set the default domain to "\"
This has resolved the issue for us.
I had the 1st suggestion done and running for a few days and it still would not work. The 2nd one, however, was the one that worked for me. Instructions below.
1- Open IIS Manager on the CAS server.
2- Navigate to "<Server Name>\Sites\Default Web Site\owa". Double-click "Authentication". Select "Basic Authentication". Make sure it is enabled. Click "Edit" in the far-right pane. Enter "\" into the "Default domain" field. Leave "Realm" field blank.
Click "OK".
3- Navigate to "<Server Name>\Sites\Default Web Site\owa\auth". Double-click "Authentication". Select "Basic Authentication". Make sure it is enabled. Mine was disabled. Click "Edit" in the far-right pane. It should pick-up the "\" through the
hierarchy. Enter "\" into the "Default domain" field if it has not. Leave "Realm" field blank. Click "OK".
4- Navigate back up to "<Server Name>" under "Start Page" in the left pane. Click on the server name to select the server. Click on "Restart" in the far-right pane to restart the web server.

Forcing Password Changes

I've got some scenarios I've been asked to research regarding expiring passwords and preventing account lockouts. We are on Windows 7.
If a user is logged in while their password expires, is it possible to force a prompt to have them change their password before they log out.
If a user's screen is locked while their password expires, is it possible to set a password change prompt when they attempt to unlock?
I guess the theme is how can password changes be forced before a user can get locked out after password expiration???
Thanks,
Matt

The only thing you can change is the notification about how many days it is before the password expires.
http://technet.microsoft.com/en-us/library/ee829687(v=ws.10).aspx

Expired Password Users can´t login into an RDP Connection

Hi,
we have some remote users that use .rdp files to connect directly to some remote applications. They don´t use RD WebApp.
When their password are expired, they can´t logon.
Is it possible to enable them to have the question asking then to change their password?
Thankyou in advance.
Fabio Martins MCDST/MCSA Brasil!!!

Hi,
Please describe exactly the behavior you are seeing as well as any error text the users are receiving. What operating system version are the users running on their PCs, and what version of the Remote Desktop Client are they using?
When starting the RemoteApp the user may click the Details button in the lower left corner. This will give them a screen notifying them that their password has expired and giving the ability to change it.
NOTE: Allow connections only from computers running Remote Desktop with Network Level Authentication must be
unchecked in RD Session Host Configuration--RDP-Tcp Properties--General tab or expired password changing will not work. As always users should use their full user name (domain\username) when
entering their credentials.
Thanks.
-TP

Prompting for expired passwords

The SQLDeveloper interface does not appear to prompt users to change their expired passwords. Our developers use SQL*plus for their initial login to change their expired passwords, yet does anyone know an easier way? __thanks

You might want to vote for this feature at the Feature Request Page
http://htmldb.oracle.com/pls/otn/f?p=42626:39:2000715527217488::NO::P39_ID:2321

Outlook prompting for password after password change

I have a client who has Exchange 2013 and the PCs run Windows 8.1 with Office 2013.
The users just started having the following problem. Their domain passwords are expiring and when they update them with a new one, Outlook starts prompting them for a password when they open it and periodically while Outlook is running. They keep entering
the new password and checking the box to remember it, but the password prompt keeps coming back.
I've checked and the account in Outlook does not have the box checked to always prompt for logon credentials. I did notice that the proxy authentication is set for NTLM so I changed it to Basic, restarted Outlook and there was no password prompt and the
user has not seen one since.
Any idea why having the proxy authentication set to NTLM would cause this after the domain password changed? It has been set to NTLM rather than Basic for years now. Exchange 2013 has been in use there for about 6 months and Office 2013 longer than
that. Windows 8.1 has been on the computers for 3-5 months so I don't think that's it either. I've tried with our domain account we have setup there and with a test user account by changing the password on them but with the proxy authentication set to NTLM
I haven't had the password prompt appear other than once the next time Outlook is opened after the password change, and that is to be expected.
So it's not every user account but a good number of them this is happening with.
Jonathan

I have an update.
There must be a GPO or setting in Outlook changing the proxy authentication to NTLM because this morning it was changed back to NTLM from Basic. They all either shut down or restarted their computers since I worked on them Friday.
One user got the password prompt one time when starting Outlook. She entered the password and that was it. But she was unable to connect to a shared calendar. She put her computer to sleep, woke it up, logged in, and then was able to connect to the shared
calendar. I don't understand that.
Another user could not get the password prompt to go away this morning no matter how often he input his password, and he also was unable to connect to the shared calendar. So I changed the proxy authentication back to Basic again, restarted Outlook (which
is required), got no password prompt, and he was able to connect to the calendar.
I realize the calendar issue is tied to the password issue. What I don't understand is why these people are getting the password prompt ever since they changed their domain password.
I have a test account and test PC set up in a VM and it does not have any of these problems. I've changed its password 3 times but I never get a prompt when opening Outlook and it is set to NTLM.
I hope someone out there has an idea why changing their password now is causing this authentication problem in Outlook.
Jonathan

802.1X cannot change expired password at login

Hi all,
I'm trying to roll out 802.1X authentication for wifi access at my company, however there's one major problem I can't for the life of me figure out. I'm not able to get the Macs to prompt for a password change when the password has expired at login.
On Windows when you log in it will prompt you to change your password when it's expired. However on OSX when you're on the workstation login screen, you can see the wireless icon briefly connect, then it will think for a bit and the user cannot log in at all.
OSX can definitely can change expired passwords via 802.1X, as if I log into a local account and connect to the wifi with the user whose password has expired, it will prompt to change it, and changes it successfully.
I'm using NPS for RADIUS authentication against AD, and using Profile Manager in OSX Server to create the 802.1X profile.
Does anyone have any experience with OSX and using WPA Enterprise/802.1X Profiles?
Thanks!

Hi,
Can you post a screenshot for this situation?
Sometimes, the third party credential provider would lead to some issue like this, I suggest you check the
current credential provider via the following path:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\SessionData\x\LastLoggedOnProvider
You should compare the result with the values in the following path:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\credential providers
If the current value is third party credential provider, try to disable it:
To disable the provider add a REG_DWORD value "Disabled"=1 to that provider’s CLSID subkey.
The provider will be disabled on the next session creation (sessions are created when you log off, switch users, or reboot.
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

Changing expired password on a cbckend database from a frontend database

I have a split database with an Oracle backend (BE) and MS Access frontend (FE). My question is how to reset an expired password on the BE from the FE.
If I log on to the backend via sqlplus an error ORA-28001 (Password expired) occurs and the system immediately prompts for a new password before completing the login process.
If I log on from the frontend I get the same ORA error from the BE, but as far as I can tell, I can't reset the password from the FE.
I can capture the error fine at the FE and I am thinking that I could use this to open a dialog to reset the password and change it over the ODBC connection. The problem is that I need to get a connection to the BE database before sending a command to change the password from the FE, but since login cannot be completed from the FE, because of the expired password, I can't get an ALTER USER statement to execute on the BE to reset the password.
Is there a way to change a pre-expired password on an Oracle backend database from a frontend database? I don't see this as an Oracle/Access problem but as a problem that exists for any split database.

I have thought about this a little and I am thinking about keeping a table of password update information. I can use this to create a "soft" expired password, using an expiration date in the table for each account. If the password is expired by the database then we can just update it with sqlplus or one of the other options.
As far as getting the organization to change it is waaaay to big and stupid to change their policy.

Changing expired password of "system" user

Hello,
today I got a message that said that "system"-s password is expired.
I used sqlplus:
sqlplus system/mypass@myserver:1521/dwh
Then I got:
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Oct 14 12:05:50 2009
Copyright (c) 1982, 2005, Oracle. All rights reserved.
ERROR:
ORA-28001: the password has expired
Changing password for system
New password:
But when I entered the new password twice after prompting, I got:
ERROR:
ORA-01017: invalid username/password; logon denied
Password unchanged
Weird, can somebody explain this?

user10298630 wrote:
Hello,
today I got a message that said that "system"-s password is expired.
I used sqlplus:
sqlplus system/mypass@myserver:1521/dwh
Then I got:
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Oct 14 12:05:50 2009
Copyright (c) 1982, 2005, Oracle. All rights reserved.
ERROR:
ORA-28001: the password has expired
Changing password for system
New password:
But when I entered the new password twice after prompting, I got:
ERROR:
ORA-01017: invalid username/password; logon denied
Password unchanged
Weird, can somebody explain this?What exactly is weird in it? There must be a mistake in the typing of yours due to which you have got this error, the same worked for me dandy,
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Oct 14 17:19:10 2009
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Connected to an idle instance.
SQL> startup
ORACLE instance started.
Total System Global Area 167772160 bytes
Fixed Size                  1247900 bytes
Variable Size              67110244 bytes
Database Buffers           96468992 bytes
Redo Buffers                2945024 bytes
Database mounted.
Database opened.
SQL> conn fortest/test
ERROR:
ORA-01017: invalid username/password; logon denied
Warning: You are no longer connected to ORACLE.
SQL> conn / as sysdba
Connected.
SQL> drop user fortest cascade;
User dropped.
SQL> create user fortest identified by test password expire;
User created.
SQL> grant create session to fortest;
Grant succeeded.
SQL> conn fortest/test
ERROR:
ORA-28001: the password has expired
Changing password for fortest
New password:
Retype new password:
Password changed
Connected.
SQL> +So the reason you got the error is 99.99% a typing mistake. To get back the user working, like others have suggested already, use Sys account and unlock it.
HTH
Aman....

Getting invalid username/ password when trying to change expired password

I am using Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production.
I created a user with password expire option and gave create session grant. When I tried to connect with the user it gives me password expired message as expected but when I try to put new password it gives me invalid username/password as show below. I have tried many times and made sure new password and retype new password are same and long enough.
Could anyone please advice what am I missing?
SQL> conn schu/xxx@abc
ERROR:
ORA-28001: the password has expired
Changing password for schu
New password: ********
Retype new password: ********
ERROR:
ORA-01017: invalid username/password; logon denied
Password unchanged
SQL>

spur230 wrote:
sb92075 wrote:
spur230 wrote:
It works that way but I need to use password expire option.
I see the words, but do not understand what they/you mean.The code you asked me to run work perfectly but I am getting ORA-01017 when I use password expire option.
With your code if I do
alter user schu password expire.
It will ask me to enter new password and verify password after which I am getting
ERROR:
ORA-01017: invalid username/password; logon deniedI am not sure what you are doing & doing wrong; but it works OK for me.
SQL> CREATE USER USER3 IDENTIFIED BY USER3 PASSWORD EXPIRE;
User created.
SQL> GRANT CREATE SESSION TO USER3;
Grant succeeded.
SQL> CONNECT USER3/USER3
ERROR:
ORA-28001: the password has expired
Changing password for USER3
New password:
Retype new password:
Password changed
Connected.
SQL> CONNECT USER3/USER4
Connected.
SQL> show user
USER is "USER3"
SQL>

Cisco ISE - User with expired password is forced to logoff before they can change password.

I came across a situation today where a user was logged into a laptop with an expired password and could not change it by simply locking the computer and logging in with the correct credentials. (They had previously changed it on their main computer) The port restricted any communication since the user was failing authentication.
So, the I had the user logout and immediately the computer authenticated, and the user was able to login with the correct credentials. I dont want my users to have to logout completely in this situation. Below is the port config and the ISE error messages.
switchport access vlan 423
switchport mode access
switchport block unicast
switchport voice vlan 425
ip arp inspection limit rate 10
ip access-group ACL-LOW-IMPACT-MODE in
authentication event fail action next-method
authentication event server dead action authorize voice
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication timer inactivity server
authentication violation restrict
mab
snmp trap mac-notification change added
dot1x pae authenticator
dot1x timeout tx-period 3600
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100

Completely forgot about odac version. I have ODT with ODAC 102.02 installed.
I want to download new drivers from here:
Oracle10g Release 2 ODAC and Oracle Developer Tools for Visual Studio .NET
http://download.oracle.com/otn/other/ole-oo4o/ODTwithODAC1020221.exe
And old drivers from here (just for testing)
Oracle Developer Tools for Visual Studio .NET 10.1.0.4.0
http://download.oracle.com/otn/other/ODT10104.exe
Does anybody know something about these releases? Do they have the same behavior?
Thanks.

Changing expired password with OCIPasswordChange

I know that ODP.NET has a option to open a connection with a new password when the old one has expired. I'm using System.Data.OracleClient from .Net instead of ODP because I'm using the Instant Client, which does not seem to work with ODP. Can somebody tell me how to call OCIPasswordChange?

Hi,
OCIPasswordChange is an OCI call. You'd have to write a complete OCI application in C to be able to use that, and OCI coding isnt for the faint of heart.
I do have a complete OCI sample that does it though.. here you go.
Cheers,
Greg
This sample demonstrates the use of OCIPasswordChange once the
password has expired, which requires setting the session into
the service context. Tested with oci 8.1.5, vc++ 6.0 sp3.
first create the user with expired password:
SQL> create user testuser identified by oldpass password expire;
SQL> grant create session to testuser;
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <oci.h>
static OCIEnv          *p_env;
static OCIError          *p_err;
static OCIServer *p_srv;
static OCISession *p_ses;
static OCISvcCtx     *p_svc;
void main()
     int          rc;
     char     errbuf[100];
     int          errcode;
     // Step 1: Initialize OCI
     rc = OCIInitialize((ub4) OCI_DEFAULT, (dvoid *)0,
          (dvoid * (*)(dvoid *, size_t)) 0,
          (dvoid * (*)(dvoid *, dvoid *, size_t))0,
          (void (*)(dvoid *, dvoid *)) 0 );
     // Step 2: Initialize the OCI evironment
     rc = OCIEnvInit( (OCIEnv **) &p_env, OCI_DEFAULT, (size_t) 0, (dvoid **) 0 );
     // Step 3: Initialize the OCI handles
     rc = OCIHandleAlloc( (dvoid *) p_env, (dvoid **) &p_err, OCI_HTYPE_ERROR,
          (size_t) 0, (dvoid **) 0);
     rc = OCIHandleAlloc( (dvoid *) p_env, (dvoid **) &p_svc, OCI_HTYPE_SVCCTX,
          (size_t) 0, (dvoid **) 0);
     rc = OCIHandleAlloc( (dvoid *) p_env, (dvoid **) &p_srv, OCI_HTYPE_SERVER,
          (size_t) 0, (dvoid **) 0);
     rc = OCIHandleAlloc((dvoid *) p_env, (dvoid **)&p_ses, (ub4) OCI_HTYPE_SESSION,
          (size_t) 0, (dvoid **) 0);
     // Step 4: Connect using a mutli-session connect
     rc = OCIServerAttach( p_srv, p_err,
          (text *)"local", 5, 0);
     // Create a server context
     rc = OCIAttrSet( (dvoid *) p_svc, OCI_HTYPE_SVCCTX,
          (dvoid *)p_srv, (ub4) 0,
          (ub4) OCI_ATTR_SERVER, (OCIError *) p_err);
     // Create a session context
     rc = OCIAttrSet((dvoid *) p_ses, (ub4) OCI_HTYPE_SESSION,
          (dvoid *) "testuser", (ub4) 8,
          (ub4) OCI_ATTR_USERNAME, p_err);
     rc = OCIAttrSet((dvoid *) p_ses, (ub4) OCI_HTYPE_SESSION,
          (dvoid *) "oldpass", (ub4) 7,
          (ub4) OCI_ATTR_PASSWORD, p_err);
     rc = OCIAttrSet((dvoid *) p_svc, (ub4) OCI_HTYPE_SVCCTX,
          (dvoid *) p_ses, (ub4) 0,
          (ub4) OCI_ATTR_SESSION, p_err);
     // Open the session on the server
     rc = OCISessionBegin ( p_svc, p_err, p_ses, OCI_CRED_RDBMS,
          (ub4) OCI_DEFAULT);
     // This is a generic error checking routine
     if (rc != 0)
          OCIErrorGet((dvoid *)p_err, (ub4) 1, (text *) NULL, &errcode,
               (text*)errbuf, (ub4) sizeof(errbuf), OCI_HTYPE_ERROR);
          printf("Error - %.*s\n", 512, errbuf);
          // If the error is a 28001, change the password.
          if(errcode==28001)
               // You need to set the Session into the service context
               // before you can call OCIPasswordChange(), and you also need
               // to allocate both the session and service context handles
               // before hand. Then you can call OCIPasswordChange.
               rc = OCIAttrSet((dvoid *)p_svc, OCI_HTYPE_SVCCTX,
                    (dvoid *)p_ses,0,OCI_ATTR_SESSION, p_err);
               rc = OCIPasswordChange(p_svc, p_err, "testuser",8,
                    "oldpass",7, "newpass",8, OCI_DEFAULT);
               if(rc != 0) printf("Password change failed.\n");
               else printf("Password successfully changed.\n");
     // Step 10: Disconnect from the server and free the
     rc = OCIServerDetach( p_srv, p_err, OCI_DEFAULT );
     rc = OCIHandleFree((dvoid *) p_srv, OCI_HTYPE_SERVER);
     rc = OCIHandleFree((dvoid *) p_svc, OCI_HTYPE_SVCCTX);
     rc = OCIHandleFree((dvoid *) p_err, OCI_HTYPE_ERROR);
     printf("Disconnected.\n\n");
     return;
}

Simple Interface expired password change prompt

Similar Messages

Maybe you are looking for