[comp.sys.apollo] Password aging

chen@digital.sps.mot.com (Jinfu Chen) (09/21/90)

One of the features of SR10 registry is to be able to specify how long
password should be changed. However, I never get it working. IN SR10.1, once
an account's password is expired, user logging from console will be asked to
re-enter multiple times (about five to six) and DM eventually gives up and
the original password is kept.

Now it seems password aging still doesn't work under SR10.2. However, the
result is a bit different. When I log on to a console, DM asks a new password
and re-enter to verify it. So far so good, however, after a while DM returns
an error, "Too many tries, password not changed".

Logging from a shell via /com/login works fine with password aging.

Does anyone know if this is my setup problem or it's a bug? If so does
SR10.3 fix already?

For your information:
% ts /etc/rgyd
Ver Name              Time Stamp                     File Name
--------------------------------------------------------------
o 3 rs_c              1989/10/06  7:22:41 MST (Fri)  /etc/rgyd

% subs /sys/dm/dm/ 
"/sys/dm/dm/" is a nil subsystem manager
"/sys/dm/dm/" is a file subsystem data object
% subs /com/login
"/com/login" is a login subsystem manager
"/com/login" is a file subsystem data object
% subs /bin/login
"/bin/login" is a login subsystem manager
"/bin/login" is a file subsystem data object
-- 
Jinfu Chen                  (602)898-5338 
Motorola, Inc.  SPS  Mesa, AZ
 ...uunet!motsps!digital!chen
chen@digital.sps.mot.com
CMS: RXFR30 at MESAVM
----------

collins@nvpna1.prl.philips.nl (Donal O Coileain) (09/21/90)

In <4ceda9bb.12c9a@digital.sps.mot.com> chen@digital.sps.mot.com (Jinfu Chen) writes:
>Now it seems password aging still doesn't work under SR10.2. However, the
>result is a bit different. When I log on to a console, DM asks a new password
>and re-enter to verify it. So far so good, however, after a while DM returns
>an error, "Too many tries, password not changed".

>Does anyone know if this is my setup problem or it's a bug? If so does
>SR10.3 fix already?

I suspect it may be a setup problem. We have set the password lifespan 
option at this site and it works. We also run sr10.2.

system@alchemy.chem.utoronto.ca (System Admin (Mike Peterson)) (09/23/90)

In article <collins.653923459@nvpna1> collins@nvpna1.prl.philips.nl (Donal O Coileain) writes:
>In <4ceda9bb.12c9a@digital.sps.mot.com> chen@digital.sps.mot.com (Jinfu Chen) writes:
>>Now it seems password aging still doesn't work under SR10.2. However, the
>>result is a bit different. When I log on to a console, DM asks a new password
>>and re-enter to verify it. So far so good, however, after a while DM returns
>>an error, "Too many tries, password not changed".
>
>>Does anyone know if this is my setup problem or it's a bug? If so does
>>SR10.3 fix already?
>
>I suspect it may be a setup problem. We have set the password lifespan 
>option at this site and it works. We also run sr10.2.

Password aging/expiry works sometimes at SR10.2, especially if you login
on the display. Sometimes it actually changes the password, sometimes it
gives up. If you run X Windows by default at login, it will cause the
login xterm to be killed every time that a new password is requested,
but you can get another xterm from the window manager.
If your master registry is on a DN10000 (like ours), it does not work
most of the time, even on the display (SR10.2.p has no where near all
the bug fixes / enhancements of SR10.2).
It never works for telnet/rlogin logins.
This is a known problem and it is supposed to work at SR10.3.
-- 
Mike Peterson, System Administrator, U/Toronto Department of Chemistry
E-mail: system@alchemy.chem.utoronto.ca
Tel: (416) 978-7094                  Fax: (416) 978-8775