Re: Web service with expiring passwords

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

That would also be something that it should do.

But it will need to deal with expired too. Harder to test soon expiring as
need to have account that falls into that. Expiring in a few days isn't
something you can set on account. Need a full test domain to adjust max
password age.

"Patrice" wrote:

What if you set an expiration delay rather than immediately asking for a new
password ?

Search around http://support.microsoft.com/kb/297121/en-us. It seems owa
does this but it is unclear if it works once the password expired. The idea
would be then to have an expiration delay and to check this expiration so
that you can ask the user to change his password *before* expiration...

A generic message could include a link to the change password page (have you
checked if you are allowed to change your password after it has expired ?)

--
Patrice

"JeffJ" <JeffJ@xxxxxxxxxxxxxxxxxxxxxxxxx> a crit dans le message de groupe
de discussion : AC5E8874-C15E-438B-9BB7-E76F37C83C9E@xxxxxxxxxxxxxxxx
At least on IIS on XP the web service just returns error 401: Access
Denied.

I was looking for help to actually notify user password was expired and
then
ability to change it. The users will ONLY ever interact via the web
service
so no other way for them to ever know there password is or going to
expire.

Sounds like someone else here has had different responce with 2003 server.
May have actually did a redirect at least. I haven't tried it.

Jeff

"Patrice" wrote:

A bit unclear. Do you mean it still doesn't work if the user change the
password ? Have you tried to change the password as required to see if
the
service then works ?

Or would you like that the user has to change its password but that the
web
service can work with the user account "old" password (IMHO you can't).

--
Patrice

"JeffJ" <JeffJ@xxxxxxxxxxxxxxxxxxxxxxxxx> a crit dans le message de
groupe
de discussion : 0980A09F-ABC0-4AFB-8697-7D0E50104D61@xxxxxxxxxxxxxxxx
I have simple "Hello World" web service created by web service wizard.
I have put it onto IIS server. Remove Anonymous access.

Call it via a windows .net app:

Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As
System.EventArgs) Handles MyBase.Load
Dim x As New WindowsApplication1.hellow.Service1

Dim cache = New System.Net.CredentialCache

cache.Add(New Uri(x.Url), "Negotiate", _
New System.Net.NetworkCredential("user", "pword", "domain"))
x.Credentials = cache

TextBox1.Text = x.HelloWorld
End Sub

Works great until I set password must be reset on next logon. Then get
401:
Access Denied.
I have PasswordChangeFlags set 1.
I have IISadmpwd up and working in IIS.

So my question is. Is there a way to get web services to work with
PasswordChangedFlags and IISADMPWD?

We need to be able to force periodic password changes for use of our
webservice.

Thanks,

Jeff




.

Relevant Pages

  • RE: ASP.NET password expired... again
    ... How are you determining that the account is expiring? ... Jim Cheshire, MCSE, MCSD ... The problem is my ASPNET account on my local WinXP pro box is set to ... By default that doesn't get set to never expire, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: [PATCH 5/7] autofs4 - fix direct mount pending expire race
    ... we cannot check the AUTOFS_INF_EXPIRING flag during a path walk ... which leads to lookups walking into an expiring mount while it is ... dentry until the expire is completed. ...
    (Linux-Kernel)
  • RE: Notifying users of password expiration via e-mail`
    ... your users use OWA for email there is a notification that can be turned ... on if the password is expiring soon. ... It's worth checking out if all you off site users are using OWA. ... they cannot be notified at login time that their password will expire. ...
    (Focus-Microsoft)
  • Re: How to expire a page (VB) ASP.NET
    ... No Cache option works in classic ASP but ... I have tired to use the following to expire the page, ... which is interesting as in classic ASP expiring a page is a ... 'Cache set to No Cache ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: password expiration
    ... I want to be able to set the option to have my password never expire. ... expiring already, every 14 days or so, and the option to set to to never ... Jeff ... > account for the domain can never expire. ...
    (microsoft.public.win2000.security)