Posts

Showing posts from April, 2016

AccountLockoutPolicyCmd : Password Expiry in IBM WCS (Websphere commerce)

Reasons for account lock/ password expiry in IBM web sphere commerce Regardless of whether valid credentials were specified and LDAP mode is not used, the  AccountLockoutPolicyCmd  task command is called to update policy account information for the user: Account lockout policy: USERREG.PASSWORDRETRIES is incremented on a bad password attempt. If there are too many retries with incorrect passwords, the user account gets disabled, by setting USERREG.STATUS to 0. Policy password policy: If the password is too old, the password is changed to the expired state, by setting USERREG.PASSWORDEXPIRED to 1. The AccountLockoutPolicyCmd task command does not do anything, if LDAP is used. https://www.ibm.com/support/knowledgecenter/SSZLC2_7.0.0/com.ibm.commerce.developer.doc/refs/rselogon.htm