CCS query for 'password age' is reporting back a value of 19500+ days
search cancel

CCS query for 'password age' is reporting back a value of 19500+ days

book

Article ID: 273424

calendar_today

Updated On:

Products

Control Compliance Suite Standards Server Control Compliance Suite Control Compliance Suite Standards Module

Issue/Introduction

When running a CCS query looking for a user's 'password age' value, CCS is reporting some users with a password age of 19500+ days.

Environment

Release: CCS 12.5.X and CCS 12.6.X

Cause

If you have domain cache enabled in your CCS environment, the users that CCS is reporting that 19500+ days value are user accounts that have never logged in. 

If domain cache is disabled, then CCS will report the 'password age' of users that have never logged in as '0 days 0 hours 0 Min 0 Sec'

Resolution

This issue will be fixed in SCU 2023-2, which is estimated to be available in the first part of November 2023.

The fix will make it so that if you have domain cache enabled, and a user has never logged in, then CCS will return '0 days 0 hours 0 Min 0 Sec' for that user instead of '19500+' days.