LO91302: "YOUR ACCOUNT IS LOCKED OUT" SHOWS ALTHOUGH USER NOT LOCKED OUT

APAR status

• Closed as fixed if next.

Error description

• If grace period is set very large value (e.g. 25000), "Your
  account is locked out; see your system administrator to reset
  it  " is showed although user not locked out.
  
  Steps to reproduce:
  1. create the following security policy.
  
  - Check password on Notes id file - Yes
  - Enforce Password Expiration - Notes & Internet
  - Required Change Interval - 30
  - Allowed Grace Period - 35600
  - Password History - 2
  - Warning Period - 30
  
  2. edit server document and enable "Check password of  Notes
  IDs" in security tab.
  
  3. Apply security policy to test user .
  After apply the policy.  Confirm [File -security - user
  security] and password expiration is set correctly.
  
  4. Perform "tell adminp process all"
  please confirm the password digest field is modified.
  
  5. Adjust OS date to password expiration date.
  
  6. Start Domino and Notes client.
  
  7. After log-in, "You must change your password. It expired on"
  will show. Please click "No" button at this time.
  
  8. Perform [File - Security -User Security] and Click [Change
  Password]
  
  9. After set new password, "Your password change succeeded! "
  will show. click "OK".
  
  10 (PROBLEM) "Your account is locked out; see your system
  administrator to reset it" will show unexpectedly.
  The message is wrong.  User is not locked out actually.
  

Local fix

• Do not set large Grace Period .  In my test, less than 24850
  days works expectedly.
  

Problem summary

• This APAR is closed as FIN. We have deferred the fix to a
   future release.
  

Problem conclusion

Temporary fix

Comments

• This APAR is associated with SPR# CSAOAHKDY7.
  This APAR is closed as FIN. We have deferred the fix to a
   future release.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels