[bit.listserv.novell] Passwords getting "lost"

LSRGS@UCLAAIS.BITNET (Glenn Scott) (02/01/90)

I'm running SFT 2.15 (rev A... still working on rev C) and something
strange is happening.  When I create users (initially, I created them
with MAKEUSER, but now through SYSCON), I assign the following password
restrictions:

     Password Required, Must be unique, minimum 5 chars, expires
     every 30 days, Grace logins limited to 2, user can change
     password

... I think thats all the relevant stuff.  Anyway, it seems that
as these accounts expire, my users are being asked if they want
to change their passwords or not.  If they say no, it seems that
sometimes Netware will now *never* ask for a password again.
But this doesn't *always* happen.

The other thing is that when they use the program SETPASS to change
their passwords, SETPASS will first ask for the existing password.
They can type anything they want and it accepts it!  For example

          User JOE has password SMITH
          Joe runs SETPASS
          SETPASS asks for existing passowrd.  JOE presses ENTER.
          SETPASSS asks for new passowrd (JOE presses ENTER twice).
          Password is updated and synchronized...
          JOE doesn't have a password, even though SYSCON
          says ALL users should have one (including JOE!)

What gives!  Any known problems with SETPASS on 2.15 rev A?

Glenn Scott
Honors and Undergraduate Programs / Info Services