Password policies.
Article ID: 191571
Updated On:
Products
CA Automic Workload Automation - Automation Engine
Issue/Introduction
As per audit security perspective, we have recently enabled password policies in 'UC_CLIENT_SETTINGS' for other clients and client-0.
If we implement the PWD_AGE_MAX parameter to 90, when will password expire for local users? 90 days from now or when they actually changed the password?
If we implement the PWD_AGE_MAX parameter to 90, when will password expire for local users? 90 days from now or when they actually changed the password?
Environment
Release : 12.3
Component : AUTOMATION ENGINE
Resolution
If you set the following parameter:
PWD_AGE_MAX=90
the user will be prompted to change their password 90 days from the last time that we recorded a password change. To determine this, please run the following SQL Query:
SELECT OH.OH_Name, OH.OH_Client, USR.USR_PWCHANGE FROM OH, USR WHERE USR.USR_OH_Idnr = OH.OH_Idnr AND OH.OH_DeleteFlag != 1 AND USR.USR_Ldap != 1;
and note the value of the "USR_PWCHANGE" column.
PWD_AGE_MAX=90
the user will be prompted to change their password 90 days from the last time that we recorded a password change. To determine this, please run the following SQL Query:
SELECT OH.OH_Name, OH.OH_Client, USR.USR_PWCHANGE FROM OH, USR WHERE USR.USR_OH_Idnr = OH.OH_Idnr AND OH.OH_DeleteFlag != 1 AND USR.USR_Ldap != 1;
and note the value of the "USR_PWCHANGE" column.
Additional Information
If you don't want this password policy to affect a particular user -> check "Password Never Expires" in the UI for the user who you don't want this to affect (IE: UC user).
Feedback
Yes
No
Powered by
