Client for OES settings related to password synchronization

  • 7018290
  • 18-Nov-2016
  • 18-Nov-2016

Environment

Client for Open Enterprise Server 2
Novell Client 2 SP4 for Windows

Situation

What Client settings control whether the Client synchronizes the user's eDirectory and Windows passwords, including the "Change your Windows password to match your network password" checkbox?

Resolution

There are three similar related settings in the "Advanced Login" tab of Client Properties:

Windows Password Synchronization (On/Off)  
With this feature enabled, the user can change the network password and the Windows password will be set to the same value.  Turning it off leaves the passwords separate unless they are synchronized through some other means (e.g. DirXML).

This is a "master switch" of sorts, for environments which simply never need to change a Windows account password in addition to the eDirectory account password.  e.g. DSfW, DirXML, or something else is already changing Windows password whenever the eDirectory password is changed.  This affects not just NCCredProvider, but also expired password changes, CTRL-ALT-DEL Change Password, etc.

Show login Windows password synchronization option (On/Off) 
Specifies whether the 'Change your Windows password to match your network password' option is shown when logging in to both eDirectory and Windows when the passwords are not already synchronized.

Controls specifically NCCredProvider for whether the 'Change your Windows password to match your network password' checkbox will be offered or not.

Login Windows password synchronization option default (On/Off
This is the default state of the 'Change your Windows password to match your network password' functionality that occurs during login to both eDirectory and Windows when the passwords are not already synchronized.  This setting controls the default synchronization behavior that will occur, regardless of whether 'Show login Windows password synchronization option' is allowing the checkbox to be shown to the user or not.

Controls specifically NCCredProvider's default behavior, regardless of whether the 'Change your Windows password to match your network' checkbox is shown or not.

If 
  • "Windows Password Synchronization" is set to "On" (as it is by default) and
  • "Show login Windows password synchronization option" is set to "On" (as it is by default) and 
  • "Login Windows password synchronization option default" is set to "On" (it is "Off" by default), 
Then the 'Change your Windows password to match your network password' checkbox is selected by default.