Re: SQL 2005 Password Expiration

From: Hal Berenson (hberenson_at_predictableit.com)
Date: 10/02/05

  • Next message: Dweller: "Re: SQL 2005 Password Expiration" 
    Date: Sun, 2 Oct 2005 15:29:06 -0600

    I don't know the answer to your first question, but just as with Windows
    logins you should be able to change the password after it has expired. Just
    follow the instructions from BOL:

    When a connection is made with DBPROP_INIT_PROMPT value set to
    DBPROMPT_NOPROMPT, the user interface is not shown and the new password is
    passed as normal through the connection string using the password property
    (or attribute), while the old password is passed using the new
    SSPROP_AUTH_OLD_PASSWORD property. If the connection is successful, the
    password is changed and the user gets a valid connection with their new user
    credentials. 

    -- 
Hal Berenson, VP SQL Server 2005 Readiness
Scalability Experts
"Dweller" <Dweller@discussions.microsoft.com> wrote in message 
news:CA3544D4-0E28-48B8-9338-EB5142C25201@microsoft.com...
> I've seen those, thanks, but to know that password already expired doesn't
> really help. When you Windows password is about to expire your starting to
> get warnings 2 weeks before, right? How to implement such warnings for SQL
> password expiration?
> Besides, how user is expected to change his password after it already
> expired?
> He has to login first, doesn't he? Unless we forced to use new ODBC driver
> login dialog to perform the task. Very bad idea. I would like to continue 
> use
> of my own.
> I would prefer to know password expiration date and handle it in advance
> like we do for Windows login.
>
> Thanks.
>
>
>
>
> "Mike Epprecht (SQL MVP)" wrote:
>
>> Hi
>>
>> The application developer must code for it and handle it. New error codes
>> and messages are included in SQL Server 2005
>>
>> From SQL Server 2005 BOL:
>>  15113  Login failed for user '%.*ls' Reason: Password validation failed.
>> The account is locked out.
>>  18463  Login failed for user '%.*ls'. Reason: Password change failed. 
>> The
>> password cannot be used at this time.
>>  18464  Login failed for user '%.*ls'. Reason: Password change failed. 
>> The
>> password does not meet policy requirements because it is too short.
>>  18465  Login failed for user '%.*ls'. Reason: Password change failed. 
>> The
>> password does not meet policy requirements because it is too long.
>>  18466  Login failed for user '%.*ls'. Reason: Password change failed. 
>> The
>> password does not meet policy requirements because it is not complex 
>> enough.
>>  18467  Login failed for user '%.*ls'. Reason: Password change failed. 
>> The
>> password does not meet the requirements of the password filter DLL.
>>  18468  Login failed for user '%.*ls'. Reason: Password change failed. An
>> unexpected error occurred during password validation.
>>  18487  Login failed for user '%.*ls'. Reason: The password of the 
>> account
>> has expired.
>>  18488  Login failed for user '%.*ls'. Reason: The password of the 
>> account
>> must be changed.
>>
>> Regards
>> --------------------------------
>> Mike Epprecht, Microsoft SQL Server MVP
>> Zurich, Switzerland
>>
>> IM: mike@epprecht.net
>>
>> MVP Program: http://www.microsoft.com/mvp
>>
>> Blog: http://www.msmvps.com/epprecht/
>>
>> "Dweller" <Dweller@discussions.microsoft.com> wrote in message
>> news:4D0C5874-13ED-4C78-BE52-CA863EA906A0@microsoft.com...
>> > Hi,
>> >
>> > Everybody knows that on SQL 2005 password expiration can be enabled for
>> > SQL
>> > logins. The question is how to know on a Client side about password
>> > expiration date in advance? You know, to ask user something like "You
>> > password will expire in a 2 days, do you wanna change it now or what?" 
>> > :)
>> >
>> > Thanks.
>>
>>
>>
  • Next message: Dweller: "Re: SQL 2005 Password Expiration"

    Relevant Pages

    • Re: SQL 2005 Password Expiration
      ... When you Windows password is about to expire your starting to ... He has to login first, ... > and messages are included in SQL Server 2005 ... > password does not meet policy requirements because it is too short. ...
      (microsoft.public.sqlserver.security)
    • Re: SQL 2005 Password Expiration
      ... VP SQL Server 2005 Readiness ... When you Windows password is about to expire your starting to ... >> login dialog to perform the task. ... >>> password does not meet policy requirements because it is too short. ...
      (microsoft.public.sqlserver.security)
    • Re: Expired Password
      ... > account/password to access his normal profile. ... >>> I have a laptop user that when he attempts to login ... >>> into the domain to never expire, ... >>> registry that tells 2000 local that his password needs ...
      (microsoft.public.win2000.security)
    • Re: Expired Password
      ... He is attempting to login using his domain ... account/password to access his normal profile. ... only when the PC is off of the network. ... >> into the domain to never expire, ...
      (microsoft.public.win2000.security)
    • Re: expired passwords
      ... To expire a password for a user and then try to log back in for that ... You must change your password now and login again! ... If password aging has been enabled for your account, ... you don't actually know if you typed an incorrect username or an incorrect password. ...
      (Fedora)