User must reset password in Portal after Active Directory expired pwd 04s

[PaulHodgdon]

A user's password has recently expired in AD and was subsequently changed by him. However the portal (NW04s SP9) is now stating that it is expired also. This is a read only MS AD that also has users who are in the portal UME so I can't use any tricks to get him back in like setting passwords to never expire in the portal. My password is set to expire shortly and I would suppose the same will happen to me once I change it in AD.

This is the ffirst time I have run across this - I have multiple ep6 sp40 portals running with no problem and a Trial NW04s portal running with no problems but when I installed the full EPEPCBW Java stack it is now occuring in this case.

Hs anyone run into this and solved it?I have looked through a lot of the UME settings and I just don't see any that might help. There are a lot of them and I may have missed one.

Thanks

Paul

[Former Member · Accepted solution]

If you are using read-only LDAP + DB, then which XML are you using:

dataSourceConfiguration_<LDAP_directory_vendor>_readonly_db.xml

dataSourceConfiguration_<LDAP_directory_vendor>_deep_readonly_db.xml

Have you modified it?

Just a thought, but if the user changed the password directly in AD (or via windows login etc) to a password that does not meet the portal configured password criteria (?) - see security doc below - it would prompt the user....

The two security setups (LDAP and Portal) are independently run and configured and dont talk to each other. So I suspect this could be it.

http://help.sap.com/saphelp_nw2004s/helpdata/en/7f/c52442ad9f5133e10000000a155106/frameset.htm

[PaulHodgdon · Accepted solution]

I am using the readonly+flat XML (same as all other portal types I have running)

I have not modified it.

According to the default settings our passwords in AD should meet the portal critereia but that is a good point.

His password has the same format as mine: letters and numbers 8 digits long.

Any other ideas?

Thanks for your help

Paul

[jill_diesman · Accepted solution]

Hi Paul,

Have you checked the "No password change required" property for this user in the <i>Security Provider</i> service?

In case you haven't done this, open Visual Administrator, then navigate to <server> --> Services --> Security Provider. Go to the <i>User Management</i> tab and search for the user in question. In the <i>Authentication</i> section, check the status of the checkbox "No password change required." If this field isn't checked, it could be the reason your user is getting prompted for a password change at the Portal logon.

Regards,

Jill

[PaulHodgdon]

As soon as I started reading your post i knew you were correct. I had done this before and forgotten about it(too many hats I guess).

Thank you

Paul