RE: Determining when a password will expire

From: Ross Campbell (campbell.ross_at_mayo.edu)
Date: 09/10/03 

Date: Wed, 10 Sep 2003 05:35:58 -0700

Microsoft's Windows NT GINA, msgina.dll, adapted to the
change just fine. When a user's password is within a few
days of expiration, the GINA presents a dialog box asking
the user if they would like to change the password now.
Microsoft's GINA is obviously not using the password age
value from NetUserGetInfo to make the determination that
the password is about to expire. What is Microsoft's GINA
looking at to make the determination that the password is
about to expire?

>-----Original Message-----
>I have not used Novel system before. I want to provide
some information for
>your information:
>
>In windows system, password age is stored in domain while
password days of
>novel should is stored somewhere. Of course, it is in a
different place.
>
>You call NetUserGetInfo to get password age.
NetUserGetInfo is based on NT
>provider which commnunicates with AD to get the
information from domain.
>
>On Novel system, NT provider doesn't exist and would not
work as expected.
>
>Novel system has its own AD system which is also supports
LDAP. So I guess
>if you use LDAP to access Novel AD for password day, it
might work. Of
>course, you need to know the active directory of Novel
and password day
>property of Novel to do so.
>
>NDS Provider ("NDS:") is the directory service for Novel
system.
>
>Regards,
>Justin Wan
>Microsoft Partner Online Support
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>--------------------
>| X-Tomcat-ID: 530846594
>| References: <112401c37252$816dfe60$a601280a@phx.gbl>
>| MIME-Version: 1.0
>| Content-Type: text/plain
>| Content-Transfer-Encoding: 7bit
>| From: justinew@online.microsoft.com ("Jun Wan")
>| Organization: Microsoft
>| Date: Thu, 04 Sep 2003 16:49:35 GMT
>| Subject: RE: Determining when a password will expire
>| X-Tomcat-NG: microsoft.public.platformsdk.security
>| Message-ID: <Vs3JmSwcDHA.1996@cpmsftngxa06.phx.gbl>
>| Newsgroups: microsoft.public.platformsdk.security
>| Lines: 44
>| Path: cpmsftngxa06.phx.gbl
>| Xref: cpmsftngxa06.phx.gbl
microsoft.public.platformsdk.security:2156
>| NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
>|
>| Hello Ross,
>|
>| I have read your question and will investigate it.
Thank you.
>|
>| Regards,
>| Justin Wan
>| Microsoft Partner Online Support
>|
>| This posting is provided "AS IS" with no warranties,
and confers no
>rights.
>| --------------------
>| | Content-Class: urn:content-classes:message
>| | From: "Ross Campbell" <campbell.ross@mayo.edu>
>| | Sender: "Ross Campbell" <campbell.ross@mayo.edu>
>| | Subject: Determining when a password will expire
>| | Date: Wed, 3 Sep 2003 12:35:18 -0700
>| | Lines: 12
>| | Message-ID: <112401c37252$816dfe60$a601280a@phx.gbl>
>| | MIME-Version: 1.0
>| | Content-Type: text/plain;
>| | charset="iso-8859-1"
>| | Content-Transfer-Encoding: 7bit
>| | X-Newsreader: Microsoft CDO for Windows 2000
>| | X-MimeOLE: Produced By Microsoft MimeOLE
V5.50.4910.0300
>| | Thread-Index: AcNyUoFrTAHa2zHgQDyFa3pXs+Pfhw==
>| | Newsgroups: microsoft.public.platformsdk.security
>| | Path: cpmsftngxa06.phx.gbl
>| | Xref: cpmsftngxa06.phx.gbl
microsoft.public.platformsdk.security:2139
>| | NNTP-Posting-Host: TK2MSFTNGXA14 10.40.1.166
>| | X-Tomcat-NG: microsoft.public.platformsdk.security
>| |
>| | I have written a Windows NT 4.0 "pass-through" GINA
that
>| | determines when the password will expire by comparing
>| | the "password age" (as retrieved via NetUserGetInfo)
to a
>| | proprietary password expiration interval. We recently
>| | migrated to Novell E-Dir. Microsoft's GINA
(msgina.dll) is
>| | able to determine that the password is about to
expire if
>| | the E-Dir "password expiration day" is set to some
near-
>| | term day. My GINA depends on the "password age" but
>| | the "password age" is not affected by changes to the
E-
>| | Dir "password expiration day". How does Microsoft's
>| | Windows NT 4.0 GINA determine that a password is
about to
>| | expire?
>| |
>|
>|
>
>.
>

Relevant Pages

  • Re: Determining when a password will expire
    ... the GINA presents a dialog box asking ... > the password is about to expire. ... >>I have not used Novel system before. ...
    (microsoft.public.platformsdk.security)
  • Determining when a password will expire
    ... determines when the password will expire by comparing ... Microsoft's GINA is ... My GINA depends on the "password age" but ... Windows NT 4.0 GINA determine that a password is about to ...
    (microsoft.public.platformsdk.security)
Loading