Symptom
- Testing PAM authentication with Active Directory for some user accounts.
- ASE configuration parameter 'enable pam user auth' is set to 1.
- We are able to log in using a login with an expired password and run all the commands without any restrictions.
- sp_displaylogin shows that the password is expired:
1> sp_displaylogin test
2> go
Suid: 6170
Loginame: test
Fullname: test id
Default Database: tempdb
Default Language:
Auto Login Script:
Configured Authorization:
Locked: NO
Date of Last Password Change: Oct 11 2021 12:00AM
Password expiration interval: 1
Password expired: YES
Minimum password length: 8
Maximum failed logins: 5
Current failed login attempts: 0
Authenticate with: AUTH_DEFAULT
Login Password Encryption: SYB-PROP,SHA-256
Last login date: Oct 13 2021 12:30PM
Exempt inactive lock: 0
(return status = 0)
Read more...
Environment
- SAP Adaptive Server Enterprise (ASE) 16.0 SP03 PL10 (not limited to this version)
- Pluggable Access Module (PAM)
Product
SAP Adaptive Server Enterprise 16.0
Keywords
CR825795, CR#825795, 825795, syslogins, CR697573, CR#697573, 697573 , KBA , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.