LO40270: THE GRACE PERIOD IN POLICY DOCUMENT DOES NOT WORK

APAR status

• Closed as fixed if next.

Error description

• Reproducible steps:
  1.In domino directory, open the current server document, enable
  the
  option of ?check passwords on Notes IDS? in security tab. Thenﾵ>
  restart
  domino.
  
  2.create a security setting document, and set the followings:
  Enforce Pasword Expiration: Notes Only
  Required change interval: 20 days
  Allow Grace Period: 4 days
  
  3.Add the above security setting into a new Explicit Policy.
  4.Assigned the Explicit policy to 2 test users (user1 and user2)
  
  5.A test user (user1) logged in Notes.
  6.in this id security , the ?Password must be changed by? is
  changed to 05/27/2009 (after 20 days)
  
  7.check the current test user?s person document, ?password
  digest
  ? is updated and ?last change date? is changed to the currentﾵ>ￔ
  time.
  
  8.close Notes/domino.
  9.change OS time to 05/28 (05/07+20+1).
  10. When test User1 logged in Notes, get an alert message box
  ?You must change your password. It expired on 05/27/2009. Do
  you want
  to change your password now??
  
  11. select ?No? button.
  12. Open this user?s mail db by this id, the following message
  box
  popped up:
  Your password has expired. You cannot access this server until
  you
  change it.
  
  13.change password for this user id.
  14. check in the current user?s person document, the ?last
  change
  date? is changed to the current time.
  
  15. check this test user?s id security, ?password must be
  changed
  is changed to ?06/17/2009?.
  
  16. Changed OS date to 06/19 which is 2 days after 06/17/2009
  and in the
  grace period.
  
  17. The using the test user id login notes. The following box
  popped up
  and said ?You must change your password. It expired on
  06/17/2009. Do
  you want to change your password now??
  
  
  18. Select NO button.
  
  19. The following box popped up said ?Your password has
  expired. You
  cannot access this server until you change it.?
  
  so the user must change the id password during the grace period.
  

Local fix

• None. Working as design.
  

Problem summary

Problem conclusion

Temporary fix

Comments

• This APAR is associated with SPR# MZHA7RT6BR.
  Since 7.0.4 was the last maintenance release, there are no
   plans to fix in 7x.  If the issue occurs in a future release,
   the problem will be investigated for a solution in the next
   release of the product.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• NA
  

Fix information

Applicable component levels

• R702 PSN

     UP