SQL 2005 Password Expiration

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Dweller - 30 Sep 2005 19:06 GMT

Hi,

Everybody knows that on SQL 2005 password expiration can be enabled for SQL
logins. The question is how to know on a Client side about password
expiration date in advance? You know, to ask user something like "You
password will expire in a 2 days, do you wanna change it now or what?" :)

Thanks.

Reply to this Message

Mike Epprecht (SQL MVP) - 30 Sep 2005 23:07 GMT

Hi

The application developer must code for it and handle it. New error codes
and messages are included in SQL Server 2005

From SQL Server 2005 BOL:
15113 Login failed for user '%.*ls' Reason: Password validation failed.
The account is locked out.
18463 Login failed for user '%.*ls'. Reason: Password change failed. The
password cannot be used at this time.
18464 Login failed for user '%.*ls'. Reason: Password change failed. The
password does not meet policy requirements because it is too short.
18465 Login failed for user '%.*ls'. Reason: Password change failed. The
password does not meet policy requirements because it is too long.
18466 Login failed for user '%.*ls'. Reason: Password change failed. The
password does not meet policy requirements because it is not complex enough.
18467 Login failed for user '%.*ls'. Reason: Password change failed. The
password does not meet the requirements of the password filter DLL.
18468 Login failed for user '%.*ls'. Reason: Password change failed. An
unexpected error occurred during password validation.
18487 Login failed for user '%.*ls'. Reason: The password of the account
has expired.
18488 Login failed for user '%.*ls'. Reason: The password of the account
must be changed.

Regards
--------------------------------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland

IM: mike@epprecht.net

MVP Program: http://www.microsoft.com/mvp

Blog: http://www.msmvps.com/epprecht/

> Hi,
>
[quoted text clipped - 5 lines]
>
> Thanks.

Reply to this Message

Dweller - 01 Oct 2005 01:17 GMT

I've seen those, thanks, but to know that password already expired doesn't
really help. When you Windows password is about to expire your starting to
get warnings 2 weeks before, right? How to implement such warnings for SQL
password expiration?
Besides, how user is expected to change his password after it already
expired?
He has to login first, doesn't he? Unless we forced to use new ODBC driver
login dialog to perform the task. Very bad idea. I would like to continue use
of my own.
I would prefer to know password expiration date and handle it in advance
like we do for Windows login.

Thanks.

> Hi
>
[quoted text clipped - 41 lines]
> >
> > Thanks.

Reply to this Message

Hal Berenson - 02 Oct 2005 22:29 GMT

I don't know the answer to your first question, but just as with Windows
logins you should be able to change the password after it has expired. Just
follow the instructions from BOL:

When a connection is made with DBPROP_INIT_PROMPT value set to
DBPROMPT_NOPROMPT, the user interface is not shown and the new password is
passed as normal through the connection string using the password property
(or attribute), while the old password is passed using the new
SSPROP_AUTH_OLD_PASSWORD property. If the connection is successful, the
password is changed and the user gets a valid connection with their new user
credentials.

Signature

Hal Berenson, VP SQL Server 2005 Readiness
Scalability Experts

> I've seen those, thanks, but to know that password already expired doesn't
> really help. When you Windows password is about to expire your starting to
[quoted text clipped - 65 lines]
>> >
>> > Thanks.

Reply to this Message

Dweller - 03 Oct 2005 02:35 GMT

Thanks Hal, this SSPROP_AUTH_OLD_PASSWORD is something I missed before.

> I don't know the answer to your first question, but just as with Windows
> logins you should be able to change the password after it has expired. Just
[quoted text clipped - 77 lines]
> >> >
> >> > Thanks.

Reply to this Message

Paulo Rosa - 05 Oct 2005 03:40 GMT

Hi,

Could give me some more details in how to recover or reset the experied
password on sql server 2005?

I am not a database pesron, I just know that I think I lost my stored
procedures and table structure, cause all account had the password expired.

Thanks

Signature

Paulo Rosa
Software Developer
Aqua Resource Group

Reply to this Message