ross campbell

the "password age" (as retrieved via NetUserGetInfo) to a
proprietary password expiration interval. We recently
migrated to Novell E-Dir. Microsoft's GINA (msgina.dll) is
able to determine that the password is about to expire if
the E-Dir "password expiration day" is set to some near-
term day. My GINA depends on the "password age" but
the "password age" is not affected by changes to the E-
Dir "password expiration day". How does Microsoft's
Windows NT 4.0 GINA determine that a password is about to
expire?

justinew

Hello Ross,

I have read your question and will investigate it. Thank you.

Regards,
Justin Wan
Microsoft Partner Online Support

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Content-Class: urn:content-classes:message
| From: "Ross Campbell" <campbell.ross@mayo.edu>
| Sender: "Ross Campbell" <campbell.ross@mayo.edu>
| Subject: Determining when a password will expire
| Date: Wed, 3 Sep 2003 12:35:18 -0700
| Lines: 12
| Message-ID: <112401c37252$816dfe60$a601280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcNyUoFrTAHa2zHgQDyFa3pXs+Pfhw==
| Newsgroups: microsoft.public.platformsdk.security
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.platformsdk.security:2139
| NNTP-Posting-Host: TK2MSFTNGXA14 10.40.1.166
| X-Tomcat-NG: microsoft.public.platformsdk.security
|


| the "password age" (as retrieved via NetUserGetInfo) to a
| proprietary password expiration interval. We recently
| migrated to Novell E-Dir. Microsoft's GINA (msgina.dll) is
| able to determine that the password is about to expire if
| the E-Dir "password expiration day" is set to some near-
| term day. My GINA depends on the "password age" but
| the "password age" is not affected by changes to the E-
| Dir "password expiration day". How does Microsoft's
| Windows NT 4.0 GINA determine that a password is about to
| expire?
|

justinew

I have not used Novel system before. I want to provide some information for
your information:

In windows system, password age is stored in domain while password days of
novel should is stored somewhere. Of course, it is in a different place.

You call NetUserGetInfo to get password age. NetUserGetInfo is based on NT
provider which commnunicates with AD to get the information from domain.

On Novel system, NT provider doesn't exist and would not work as expected.

Novel system has its own AD system which is also supports LDAP. So I guess
if you use LDAP to access Novel AD for password day, it might work. Of
course, you need to know the active directory of Novel and password day
property of Novel to do so.

NDS Provider ("NDS:") is the directory service for Novel system.

Regards,
Justin Wan
Microsoft Partner Online Support

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| X-Tomcat-ID: 530846594
| References: <112401c37252$816dfe60$a601280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: justinew@online.microsoft.com ("Jun Wan")
| Organization: Microsoft
| Date: Thu, 04 Sep 2003 16:49:35 GMT
| Subject: RE: Determining when a password will expire
| X-Tomcat-NG: microsoft.public.platformsdk.security
| Message-ID: <Vs3JmSwcDHA.1996@cpmsftngxa06.phx.gbl>
| Newsgroups: microsoft.public.platformsdk.security
| Lines: 44
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.platformsdk.security:2156
| NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
|
| Hello Ross,
|
| I have read your question and will investigate it. Thank you.
|
| Regards,
| Justin Wan
| Microsoft Partner Online Support
|
| This posting is provided "AS IS" with no warranties, and confers no
rights.
| --------------------
| | Content-Class: urn:content-classes:message
| | From: "Ross Campbell" <campbell.ross@mayo.edu>
| | Sender: "Ross Campbell" <campbell.ross@mayo.edu>
| | Subject: Determining when a password will expire
| | Date: Wed, 3 Sep 2003 12:35:18 -0700
| | Lines: 12
| | Message-ID: <112401c37252$816dfe60$a601280a@phx.gbl>
| | MIME-Version: 1.0
| | Content-Type: text/plain;
| | charset="iso-8859-1"
| | Content-Transfer-Encoding: 7bit
| | X-Newsreader: Microsoft CDO for Windows 2000
| | X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| | Thread-Index: AcNyUoFrTAHa2zHgQDyFa3pXs+Pfhw==
| | Newsgroups: microsoft.public.platformsdk.security
| | Path: cpmsftngxa06.phx.gbl
| | Xref: cpmsftngxa06.phx.gbl microsoft.public.platformsdk.security:2139
| | NNTP-Posting-Host: TK2MSFTNGXA14 10.40.1.166
| | X-Tomcat-NG: microsoft.public.platformsdk.security
| |


| | the "password age" (as retrieved via NetUserGetInfo) to a
| | proprietary password expiration interval. We recently
| | migrated to Novell E-Dir. Microsoft's GINA (msgina.dll) is
| | able to determine that the password is about to expire if
| | the E-Dir "password expiration day" is set to some near-
| | term day. My GINA depends on the "password age" but
| | the "password age" is not affected by changes to the E-
| | Dir "password expiration day". How does Microsoft's
| | Windows NT 4.0 GINA determine that a password is about to
| | expire?
| |
|
|