Verified Answers

If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it! Learn more

  • State Suggested Answer
  • Replies replies
    14
  • Answers answer
    1
  • Subscribers subscribers
    25
  • Views views
    614
  • Users 0 members are here
Related
Options

OES client able to login with a differing case password

Andy Konecny
 

OES user with ID from well before Universal Password was configured, and somehow missed the push to change passwords (the client was rather soft on the change, please rather than forced)
Windows PW and eDir password are different only by the case of the first character.

All the LDAP based logins work correctly with the lowercase password, and fail with the mixed case version.  Windows local is the mixed case, and OES client works just fine with it which is my worry.

Versions, this has slid by without a problem until recently, so from the end of NetWare days, to now current OES (other parts may vary)

I am assuming a forced reset will fix this (aimed for tomorrow, once her new Laptop is otherwise ready).  But why is this working now?  I can log in with the OES client from other systems just fine with either case, which is suspect. 


An oddity found in testing. Even though I disconnected after each test logging, we still ran out of simultaneous logins.  So there is a small lag in the accounting of them for that particular limit, but at least we could change that limit for the user while we sort this out.

________________________

Andy of KonecnyConsulting.ca in Toronto
Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.

Parents Reply Children
  • 0   in reply to   

    Universal password rules were set up, but it was late in the game before I could push them that far. And then they wouldn't force users to change passwords, only ask nicely to please change passwords.  So there are a number of users who still have their 5 lower case letter (or all number) passwords.  It is those user/passwords we have the issues with.

    I had been with the understanding that the old, simply, NetWare passwords had been case-sensitive, and it is these I am acting about. It looks like I was just missing that they were case-insensitive, and was looking for that confirmation.

    I've been testing on some older accounts that I've been begging them to change, and those I even get them logged in LDAP with varying case. 

    So is there a way to tell when a user's password was last changed, or what users have passwords that are not Universal Passwords, then we could target much more effectively.  Let's see if I can get diagpwd to help on that front.

    This client lacks a culture of security. It has been an upward battle all along, and with a conflict avoiding IT Director.  I keep pushing, but as an outside consultant, can only do so much.

    ________________________

    Andy of KonecnyConsulting.ca in Toronto
    Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.