nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Teamsite password change custom menu utility issue

kumar123

Hi,

We implemented a custom menu utility for Teamsite password change. we are using Teamsite 6.5 solaris 10.

This utility is working for some users and not working for some other. I verified the password change log report and it seems to be fine.

When user choose "change Password" in Teamsite file menu, new window popup and prompt for password change (like enter old password,new password and confirm new password) after providing the data when click on submit button, the message display that "your existing password incorrect".

Can any one please guide me on this?

Thanks

Find more posts tagged with

Comments

Pawan

You will have to dig into your cgi code and debug, since we do not have the source code and this is a custom implementation. If you can post your code and the sample value entered as existing and new password, then someone here may help you catching the exact problem.

kumar123

Hi Pawan,

Thanks for prompt reply. We tested the same functionality on DEV and QA Teamsite boxes and working healthy. As per your comments, hereby I am attaching perl script.

Thanks

Pawan

Have you uploaded complete script and did you compile your cgi, I am sure there are many warnings which you should remove.

Just to make sure, do you have PASSLENGTH=8 in your /etc/default/passwd file.

kumar123

Yes, I uploaded complete script. I did not find any warnings while compiling cgi script. PASSLENGTH=8 was not define in /etc/passwd file.

Thanks

lakki

The script mentioned above works good. Thanks so much.

But I was trying to implement a new password policy .. and modified the code as- it behaves weird

if ( ! $command->expect( 3, "Enter existing login password:" ));
print $command "$existing\r";
error_msg( "Existing Password appears to be incorrect." )

if ( ! $command->expect( 5, "New Password:" ));
print $command "$newpwd\n";
error_msg( "New password appears to be invalid\n" )

================= extra lines added =======================
if ( $newpwd ne /^(?=.{8,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[^A-Za-z0-9]).*$/ );
error_msg( "New password appears to be invalid 2.\n" )
=====================================================

if ( ! $command->expect( 5, "Re-enter new Password:" ));
print $command "$newpwd\r";
error_msg( "Password change failed since the new password is invalid.\n" )

The regex seems correct, and when I try to initiate the script - I get the error as : Existing Password appears to be incorrect (which is not true).

Can someone help me in identifying the error.

Adam Stoller

Are you sure the regex is right? I wrote a quick script to de-code it:

use strict;
use warnings;
use YAPE::Regex::Explain;
print YAPE::Regex::Explain->new("^(?=.{8,})(?=.*\\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[^A-Za-z0-9]).*\$")->explain;
__END__
RESULT:
(?-imsx:^(?=.{8,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[^A-Za-z0-9]).*$)

matches as follows:

NODE                     EXPLANATION
----------------------------------------------------------------------
(?-imsx:                 group, but do not capture (case-sensitive)
                         (with ^ and $ matching normally) (with . not
                         matching \n) (matching whitespace and #
                         normally):
----------------------------------------------------------------------
  ^                        the beginning of the string
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .{8,}                    any character except \n (at least 8
                             times (matching the most amount
                             possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    \d                       digits (0-9)
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    [a-z]                    any character of: 'a' to 'z'
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    [A-Z]                    any character of: 'A' to 'Z'
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    [^A-Za-z0-9]             any character except: 'A' to 'Z', 'a' to
                             'z', '0' to '9'
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  .*                       any character except \n (0 or more times
                           (matching the most amount possible))
----------------------------------------------------------------------
  $                        before an optional \n, and the end of the
                           string
----------------------------------------------------------------------
)                        end of grouping
----------------------------------------------------------------------

What, in layman's terms are you trying to verify? If it's just that the password consists of only letters and numbers - you could try:

"^(?:[A-Za-z0-9]*)$

If you want to do that but restrict it to just 8-characters in length:

"^(?:[A-Za-z0-9]{8,})$

If you're willing to accept underscores it can be even simpler:

"^\w*$" -or- "^\w{8,}$"

This last one may also be better because it does not restrict you to the English alphabetic characters.

Note: When using the script above, remember that you have to add an extra escape (back-slash) for all back-slashes in the regex and you have to put a single escape (back-slash) before the '$' that anchors the end of the regex.

lakki

i was tryin to implement following password policy

min 8chars
one lower case letter min
one upper case letter min
one special char min
one digit min

Adam Stoller

i was tryin to implement following password policy

min 8chars
one lower case letter min
one upper case letter min
one special char min
one digit min

Based on that, I believe the regex should probably be something like:

^(?=.{8,})(?=.*\d.*)(?=.*[a-z].*)(?=.*[A-Z].*)(?.=[^A-Za-z0-9].*)$
[indent]
NODE                     EXPLANATION
----------------------------------------------------------------------
(?-imsx:                 group, but do not capture (case-sensitive)
                         (with ^ and $ matching normally) (with . not
                         matching \n) (matching whitespace and #
                         normally):
----------------------------------------------------------------------
  ^                        the beginning of the string
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .{8,}                    any character except \n (at least 8
                             times (matching the most amount
                             possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    \d                       digits (0-9)
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    [a-z]                    any character of: 'a' to 'z'
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    [A-Z]                    any character of: 'A' to 'Z'
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
)                        end of grouping
----------------------------------------------------------------------[/indent]

Or possibly:

^(?=.{8,})(?=.*\w.*)(?=.*\W.*)$
[indent]
NODE                     EXPLANATION
----------------------------------------------------------------------
(?-imsx:                 group, but do not capture (case-sensitive)
                         (with ^ and $ matching normally) (with . not
                         matching \n) (matching whitespace and #
                         normally):
----------------------------------------------------------------------
  ^                        the beginning of the string
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .{8,}                    any character except \n (at least 8
                             times (matching the most amount
                             possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    \w                       word characters (a-z, A-Z, 0-9, _)
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  (?=                      look ahead to see if there is:
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
    \W                       non-word characters (all but a-z, A-Z,
                             0-9, _)
----------------------------------------------------------------------
    .*                       any character except \n (0 or more times
                             (matching the most amount possible))
----------------------------------------------------------------------
  )                        end of look-ahead
----------------------------------------------------------------------
  $                        before an optional \n, and the end of the
                           string
----------------------------------------------------------------------
)                        end of grouping
----------------------------------------------------------------------[/indent]

For comparison sake:

(ORIGINAL): /^(?=.{8,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[^A-Za-z0-9]).*$/
(OPTION-1): /^(?=.{8,})(?=.*\d.*)(?=.*[a-z].*)(?=.*[A-Z].*)(?.=[^A-Za-z0-9].*)$/
(OPTION-2): /^(?=.{8,})(?=.*\w.*)(?=.*\W.*)$/

See if one of the two options works for you.

lakki

I tried every option u have given - gettin this error message
"New password appears to be invalid"

I tried giving many password combinations also, but the error is the same.

Can you please help with this...

lakki

and when i modify the code as this

if ( ! $command->expect( 5, "New Password:",'-re', '/^(?=.{8,})(?=.*\d.*)(?=.*[a-z].*)(?=.*[A-Z].*)(?=.*[^A-Za-z0-9].*)$/'));
print $command "$newpwd\n";

It accepts every password without any restriction...