change-password-auth

Use the change-password-auth stanza entry to control whether the user is automatically authenticated, if required, during a change password request.

Syntax

change-password-auth = {yes|no}

Description

Enable this option to automatically authenticate users during password change operations. If the password for the user is expired, and this option is enabled, then WebSEAL completes the following tasks:

• Authenticates the user with the expired password.
• Changes the password.
• Automatically authenticates the user as required during the password change operation.

This configuration is helpful in failover situations. The user might be served the password change form from one WebSEAL replica, but the form posts to another replica where the user session does not exist.

Options

yes

Enable.

no

Disable.

Usage

This stanza entry is required.

Default value

no

Example

change-password-auth = yes

Parent topic: [acnt-mgt] stanza