PI96879: PWDLASTSET ATTRIBUTE IS NOT UPDATING AFTER PASSWORD CHANGE IN MS AD LDS

APAR status

• Closed as fixed if next.

Error description

• MS AD LDS is being used to authenticate user. In a scenario
  where the test user is prompted to change their password at next
  log on. Cognos is prompting a dialog box and the password is
  being changed.
  After changing password : 'CAM-CAA-0056 unable to authenticate'
  error is seen in CA 11.0.7 environment
  
  The attribute in question, "pwdLastSet" is set to "0", to
  request test user for a password change. However when the
  password is changed, that attribute does not  get updated and
  the test user is continuously asked to change their password
  until 'badPwdCount' attribute sets to 3 which would eventually
  lock the user out.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Users                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to IBM Cognos Analytics 11.1.5                       *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels