The IDS documentations states:
"When you change the value for a particular
cache with the onmode -wf or onmode -wm command, the server
immediately
expires all existing entries in that cache."
However changing the value for NS_CACHE does not do this for
12.10.FC4W1WE.
After changing the user cache from 900 to 0 and back to 900 the
old password is still in the
cache. This can be reproduced with the following steps:
Setting for NS_CACHE in oncifg is
NS_CACHE=host=900,service=900,user=900,group=900
1. useradd testpwd
2. echo "testx" | passwd --stdin testpwd
3. log in using the new account with password 'testx' (dbaccess)
4. onmode -wm NS_CACHE=host=900,service=900,user=0,group=900
5. echo "newpwd" | passwd --stdin testpwd
6. log in using the new account with password 'newpwd'
(dbaccess) (good)
7. onmode -wm NS_CACHE=host=900,service=900,user=900,group=900
11/04/14 11:41:56 Value of NS_CACHE has been changed to
host=900,service=900,user=900,group=900.
7.1 --> login with "newpwd" : 951: Incorrect password or
user
7.2 --> login with "testx" : successful
11/04/14 11:42:34 Password Validation for user [testpwd]
failed!
11/04/14 11:42:34 Check for password aging/account lock-out.
11/04/14 11:42:34 listener-thread: err = -952: oserr = 0:
errstr = testpwd@greenwood: User (testpwd@greenwood)'s password
is not correct for the database server. |
