LO86979: PROMPT "YOU HAVE A DIFFERENT PASSWORD ON ANOTHER COPY OF YOUR ID." AFTER END USER CHANGE PASSWORD VIA NOTES CLIENT FIRST

APAR status

• Closed as returned (APAR cannot be resolved without additional info from IBM or customer.)

Error description

• Customer can reproduce this problem in their production
  environment according
  to following steps. But I can not reproduce it in my testing
  environment.
  1. Create policy to enable check password on notes ID file,
  change
  password on first Notes client use, Enforce password expiration
  to
  "Notes only".
  2. Register test user1, the following 2 steps are necessary,
  otherwise
  it will not force customer to change password when first
  login
  1) Assign the policy above to user during registering
  2) Do not enable ID vault for this server
  3. Edit the person document for user1, administration tab,
  enable the
  feature of "check password".
  4. set notes client for user1, when he first login, it will
  prompt to
  change password.
  5. Administrator clear the field of "password digest" in
  person
  document for user1 and save it, then send user1 the original
  ID
  file(download form the person document)
  6. User1 login again with the original ID file, it will prompt
  him to
  change password, after changing password, when he open his
  database, it prompt
  error messsage of "You have a
  different password on another copy of your ID..."
  

Local fix

• There are 3 workarounds.
  1. Do not change password when it prompt to. Exit notes and
  launch it
  again, change password when it prompt.
  2. Change the password to the original one(same with current),
  then the
  user can access domino server. Then the end user change password
  again
  for security reason.
  3.Uncheck the option of "check password" in person document
  before end
  user change password.
  

Problem summary

Problem conclusion

Temporary fix

Comments

• This APAR is associated with SPR# XBXBA44AFQ.
  The record was returned to the person who created it for more
   information.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels