OS users with expired password are able to login to TeamSite successfully

saraAcc

Hi All,

We have a TeamSite 6.7.1 SP1 (build 68040) setup on Solaris 10.
Also, all the TeamSite users are OS users. Recently we took up user cleanup task and we are in the process of finding out all users whose password has not be set in past 6 months.
To find out the user password expiration information, we referred the /etc/shadow file which stores the last password set information for each user.
While doing this, we encountered with very strange situation where many TeamSite users whose password has been expired are able to login to TeamSite GUI without any issue and can perform all TeamSite related activity through GUI. When same user tries to login to TeamSite server through Putty, the server gives "Password Expired" error.

Has anyone else faced similar problem?
Why TeamSite allows such users to login to TeamSite?
How user authentication happens in TeamSite?
Is there a way to change the TeamSite authentication mechanism such that it will not allow users to login whose password has expired?
Any inputs on this will be greatly appreciated.

Thanks.

Adam Stoller

My guess is that the console login process goes through a locally configured / customized process before calling the actual authentication methods - and it is that preliminary stuff that checks on expiration.

The TS login just calls the actual authentication methods (I don't believe there's anyway to configure it to call preliminary custom configuration code) and thus there is no check on expiration and as long as the userid and password information are correct, the login is successful.