Previous Topic: Operational Changes from 5.xNext Topic: Effect of Single Policy Server Process on Audit Logging to Text Files (19630)


Failed Password Change Requests

In a 5.5 environment, when a user submits a password change request that contains an invalid current password, the Password Change Information screen appears with a message stating that the old password is incorrect. The user can provide the correct credential and change the password. In r12.0 SP3, the Policy Server redirects the user to the login screen without the message.

Enabling the DisallowForceLogin registry key allows the 5.5 behavior in an r12.0 SP3 environment. The registry key is located at:

HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\PolicyServer

The KeyType must be configured as REG_DWORD and the Value must be 0 (disabled) or 1 (enabled). The registry key is disabled by default.

If the registry key is enabled, values other than 0 or 1 are unsupported and have undefined behavior.