Neoview User Management and Security Administration Guide (R2.5)

NOTE: In earlier Neoview releases, the Windows driver displayed a prompt to change the
password at login time when the password has expired but is within a configured grace period.
That prompt is no longer supported; however, both HPDM and NCI provide such prompts and
allow a platform user or locally authenticated database user to change the password at login
provided that a grace period is configured and has not itself expired. For remotely authenticated
database users, logon fails unless the password policy on the LDAP server specifies a grace count,
which has not yet been exhausted.
To enable notification of password expiration, set the SQL_ATTR_WARNING environment
variable for the data source, using the Defines and Sets tab in the HPDM Connectivity area. (You
must have NDCS operator privileges to take this action.) By default, the value of this variable is
0, meaning that the notification feature is disabled; to enable the notification feature, set the value
to 1. If warnings are enabled and a user logs on with a password that will soon expire:
• The ODBC SQLConnect, SQLBrowseConnect and SQLDriverConnect APIs return
SQL_SUCCESS_WITH_INFO with one of the warnings listed in Table 2-6.
• JDBC password expiry warnings can be retrieved by calling Connection.getWarnings() on
any newly created Connection object.
• Client applications such as NCI display the corresponding warning text.
Table 2-6 User Authentication Error and Warning Messages
Description and RecoveryError TextError or Warning Code
The password is still valid but will expire
soon. The message indicates the date and
time when the password will expire.
If you are a locally authenticated database
user, you can change your password as
described in “Changing Your Own
Password” (page 103).
If you are a platform user, you can change
your password as described in “Changing
Your Own Password” (page 107).
[WARNING 8837] CLI authentication : user
: username : password to expire on
expiry-datetime .
[current-datetime]
8837
The password has expired, but you can
still log on up to count times.
This message applies only to remotely
authenticated database users, who must
contact their administrators about
changing their passwords on the external
directory server.
[WARNING 8837] CLI authentication : user
: username : password expired but login
permitted due to grace count: count
[current-datetime].
8837
The password has expired but is within
the configured grace period. You can use
either NCI or HPDM to change your
password. This message does not apply
to remotely authenticated database users.
If you are a locally authenticated database
user, you can change your password as
described in “Changing Your Own
Password” (page 103).
If you are a platform user, you can change
your password as described in “Changing
Your Own Password” (page 107).
[WARNING 8857] Local authentication :
User : username: password expired but in
grace period. Change password using NCI
or HPDM.
8857 (not 8837)
The user name or password is not valid.
Check your spelling, and make sure caps
lock is not set on your keyboard.
[ERROR 8837] CLI authentication : user :
username : invalid username or password
-8837
54 Post-installation Security Setup Tasks