Being required to enter a Password Hint when Forgot Password Action is Reset Password

  • 3092344
  • 01-Aug-2007
  • 27-Apr-2012

Environment

Novell User Application 3.5
Novell User Application 3.0.1
Novell User Application 3.0
Novell Identity Manager 3.5
Novell Identity Manager 3.0.1
Novell Identity Manager 3.0
Novell eDirectory 8.8 for All Platforms
Novell eDirectory 8.7.3 for All Platforms

Situation

Have a Password Policy applied to the container where all of the users reside in the eDirectory. This Password Policy is using Forgot Password. The action that is taken for Forgot Password is Reset Password.

The following three situations in User Application 3.5 with the above Password Policy now require or show the user with a Password Hint.

1) During the Login to the User Application, users who have not already answered their Challenge Set Questions, are prompted to answer their Challenge Set questions and then they are prompted to answer a Password Hint.

2) During the Forgot Password steps with the User Application, on the Reset Password page, the uses are presented with their Password Hint.

3) During the Login to the User Application, if the user's password either had expired and they had no more gace logins or their password did not comply with the Password they would need to update their password. After that, they are required to provide a Password Hint.


The above three (3) different situations did not present the User with the Password Hint or display the Password Hint in the 3.0 and 3.0.1 version of the User Application, if the Forgot Password Action in the Password Policy was Reset Password.

Resolution

This behavior is expected behavior in version 3.5 of the User Application. There has been a Request For Enhancement (RFE) entered against the User Application to allow the Administrator to determine if the Users should be required to enter a Password Hint no matter what the Forgot Password Action is.

If you require version 3.5 of the User Application to not require and display the Password Hint when the Forgot Password action is Reset Password, please open a Service Request with the exteNd Support team for additional assistance.