#12986: Sybase ASE 16.0 :Not able to alter login when we enable option 'change password immediately'.

abhishekj(*) reported 2014-12-17T15:14:53Z · last modified 2015-02-03T18:47:59Z

Sybase ASE 16.0 :Not able to alter login when we enable option 'change password immediately'.

Dev	ivangron
QA	tariqrahiman

Priority	Low
Complexity	Moderate

Component	App - Visual Editing
Version	16.0

Product: Aqua Data Studio (Evaluation)

Version: 16.0.0-dev-77

Build #: 41521

Build Date: 2014-Dec-16 05:57:33 PM

Operating Environment: Windows 8.1 (6.3, amd64) / Cp1252 / en / IN / Oracle Corporation 1.7.0_60-b19

Memory: Max=704,643,072; Total=449,314,816; Free=270,531,760; CPUs=8

Steps to reproduce :

1.Connect to Sybase ASE 16.0 database.

2.Create the below login from create login visual editor window :

CREATE LOGIN login_sample

WITH PASSWORD 'j-interop'

SUID 788

FULLNAME 'abhishek'

PASSWORD EXPIRATION 5

MIN PASSWORD LENGTH 5

MAX FAILED ATTEMPTS 5

DEFAULT DATABASE project

DEFAULT LANGUAGE us_english

AUTHENTICATE WITH ASE

EXEMPT INACTIVE LOCK TRUE

sp_locklogin 'login_sample', 'lock'

now select login ,"login_sample",right click on it and select option Alter Login.

Go to Authentication Pane,enter your password,change password,confirm password.

Now enable option change password immediatley.

Go to Preview sql tab

ALTER LOGIN login_sample

WITH PASSWORD 'j-interop'

MODIFY PASSWORDIMMEDIATELY 'abhishek'

Click on "alter" button.

Observation :

Here it is observed that when we enable option "change password immediately" and click on "alter" button,it displays validation message

'passwordimmediately' is not a recognized ALTER LOGIN option.

Execute the below query on query analyzer window :

ALTER LOGIN login_sample

WITH PASSWORD 'j-interop'

MODIFY PASSWORD IMMEDIATELY 'abhishek'

When we enter single space between PASSWORD and IMMEDIATELY and execute the above query ,query is executed successfully.

5 attachments

change_password_immedately.png

2014-12-17T15:16:33Z

59 KB
alter_login_password.png

2014-12-17T15:16:33Z

57 KB
alter_login.png

2014-12-23T12:52:01Z

64 KB
alter_login_databaseaccess_tab.png

2014-12-23T13:37:27Z

60 KB
alter_locklogin.png

2014-12-24T09:08:16Z

42 KB

All Comments (5) Change History

tariqrahiman 2014-12-17T18:24:49Z

@abhishek: I can see there are other cases for which the Alter fails.. Can you make sure that all the scenarios which doesn't work are captured in this issue

abhishekj(*) 2014-12-24T09:09:00Z · (edited)

Hi Tariq,

Scenario 1:

We cannot drop the following parameters when we alter login :

FULLNAME

PASSWORD EXPIRATION

MIN PASSWORD LENGTH

MAX FAILED ATTEMPTS

When we execute the below commands from query analyzer window we are able to drop the above mentioned parameters :

alter login login_sample drop fullname

alter login login_sample drop password expiration

alter login login_sample drop min password length

alter login login_sample drop max failed attempts

Scenario 2 :

Create the below login from visual editor window or from query analyzer window :

CREATE LOGIN abhishek89

WITH PASSWORD 'j-interop'

FULLNAME 'abhishek joshi'

DEFAULT DATABASE project

DEFAULT LANGUAGE us_english

EXEMPT INACTIVE LOCK TRUE

sp_locklogin 'abhishek89', 'lock'

Now,right click on the login 'abhishek89' and go to preview sql tab

Observation:

Here it is observed that when we alter login and go to preview sql tab following script is displayed in preview sql tab :

ALTER LOGIN abhishek89

MODIFY

password expiration

min password length

max failed attempts

Expected Behavior :

The above script should not be displayed in preview sql tab when we alter login.

Please refer to screenshot alter_login.png.

Same is the case for when we create login without specifying fullname and if we alter login and go to preview sql tab alter login script for fullname is displayed in preview sql tab.

Scenario 3 (Improvement) :

1.Connect to database sybase ase 16.0.

2.Expand the tree node,select Security node,expand it ,select logins,from logins select any login,right click on it and select option -->Alter Login.

From Alter Login,go to Database Access tab.

3.Go to "Users" column,enter any username ,now go to "Connection Method" columns enter method "Direct".

4.Go to Preview Sql tab and click on alter button.

Observation:

It is observed that when we alter login and when we do not edit anything and go database access tab,and enter username in "Users" columns and "Connection Method" without checking the database name,when we go to preview sql tab no comment like "/* No changes have been made */ " is displayed and when we click on alter login button no validation message is displayed like "No changes has been made".

Expected Behavior :
It should display comment in preview sql tab like "/* No changes have been made */ and when we click on alter button it should display the validation message "No changes has been made".

Scenario 4 :

CREATE LOGIN login_sample1

WITH PASSWORD 'j-interop'

SUID 90

FULLNAME 'abhishek'

PASSWORD EXPIRATION 5

MIN PASSWORD LENGTH 5

MAX FAILED ATTEMPTS 5

DEFAULT DATABASE project

DEFAULT LANGUAGE us_english

AUTHENTICATE WITH ASE

EXEMPT INACTIVE LOCK TRUE

Now click on alter the login "login_sample1" ,and enable the option Account Locked,go to preview sql tab following

script is generated :

sp_locklogin 'login_sample1', 'lock'

Click on Alter button.

Now again click on alter button.

Observations:

Here it is observe that when we click on alter button,it display the message

Account locked.

010P4: An output parameter was received and ignored.

When we again click on alter button it display the message

No account(s) locked.

010P4: An output parameter was received and ignored.

when we go to the login properties of "login_sample1" it is observed that "Account Locked" option is displayed as enable.

Is it the right kind of behavior when we click on alter button second time after setting "account lock" option to true it display the message

CREATE LOGIN login_sample1

WITH PASSWORD 'j-interop'

SUID 90

FULLNAME 'abhishek'

PASSWORD EXPIRATION 5

MIN PASSWORD LENGTH 5

MAX FAILED ATTEMPTS 5

DEFAULT DATABASE project

DEFAULT LANGUAGE us_english

AUTHENTICATE WITH ASE

EXEMPT INACTIVE LOCK TRUE

Now click on alter the login "login_sample1" ,and enable the option Account Locked,go to preview sql tab following

script is generated :

sp_locklogin 'login_sample1', 'lock'

Click on Alter button.

Now again click on alter button.

Observations:

Here it is observe that when we click on alter button,it display the message

Account locked.

010P4: An output parameter was received and ignored.

When we again click on alter button it display the message

No account(s) locked.

010P4: An output parameter was received and ignored.

when we go to the login properties of "login_sample1" it is observed that "Account Locked" option is displayed as enable.

Is it the right kind of behavior when we click on alter button second time after setting "account lock" option to true?

Please refer to screenshot alter_locklogin.png.

Hi Tariq,

Scenario 1:

We cannot drop the following parameters when we alter login :

FULLNAME

PASSWORD EXPIRATION

MIN PASSWORD LENGTH

MAX FAILED ATTEMPTS

When we execute the below commands from query analyzer window we are able to drop the above mentioned parameters :

alter login login_sample drop fullname

alter login login_sample drop password expiration

alter login login_sample drop min password length

alter login login_sample drop max failed attempts

Scenario 2 :

Create the below login from visual editor window or from query analyzer window :

CREATE LOGIN abhishek89

WITH PASSWORD 'j-interop'

FULLNAME 'abhishek joshi'

DEFAULT DATABASE project

DEFAULT LANGUAGE us_english

EXEMPT INACTIVE LOCK TRUE

sp_locklogin 'abhishek89', 'lock'

Now,right click on the login 'abhishek89' and go to preview sql tab

Observation:

Here it is observed that when we alter login and go to preview sql tab following script is displayed in preview sql tab :

ALTER LOGIN abhishek89

MODIFY

password expiration

min password length

max failed attempts

Expected Behavior :

The above script should not be displayed in preview sql tab when we alter login.

Please refer to screenshot alter_login.png.

Same is the case for when we create login without specifying fullname and if we alter login and go to preview sql tab alter login script for fullname is displayed in preview sql tab.

Scenario 3 (Improvement) :

1.Connect to database sybase ase 16.0.

2.Expand the tree node,select Security node,expand it ,select logins,from logins select any login,right click on it and select option -->Alter Login.

From Alter Login,go to Database Access tab.

3.Go to "Users" column,enter any username ,now go to "Connection Method" columns enter method "Direct".

4.Go to Preview Sql tab and click on alter button.

Observation:

Scenario 4 :

CREATE LOGIN login_sample1

WITH PASSWORD 'j-interop'

SUID 90

FULLNAME 'abhishek'

PASSWORD EXPIRATION 5

MIN PASSWORD LENGTH 5

MAX FAILED ATTEMPTS 5

DEFAULT DATABASE project

DEFAULT LANGUAGE us_english

AUTHENTICATE WITH ASE

EXEMPT INACTIVE LOCK TRUE

Now click on alter the login "login_sample1" ,and enable the option Account Locked,go to preview sql tab following

script is generated :

sp_locklogin 'login_sample1', 'lock'

Click on Alter button.

Now again click on alter button.

Observations:

Here it is observe that when we click on alter button,it display the message

Account locked.

010P4: An output parameter was received and ignored.

When we again click on alter button it display the message

No account(s) locked.

010P4: An output parameter was received and ignored.

when we go to the login properties of "login_sample1" it is observed that "Account Locked" option is displayed as enable.

Is it the right kind of behavior when we click on alter button second time after setting "account lock" option to true it display the message

CREATE LOGIN login_sample1

WITH PASSWORD 'j-interop'

SUID 90

FULLNAME 'abhishek'

PASSWORD EXPIRATION 5

MIN PASSWORD LENGTH 5

MAX FAILED ATTEMPTS 5

DEFAULT DATABASE project

DEFAULT LANGUAGE us_english

AUTHENTICATE WITH ASE

EXEMPT INACTIVE LOCK TRUE

Now click on alter the login "login_sample1" ,and enable the option Account Locked,go to preview sql tab following

script is generated :

sp_locklogin 'login_sample1', 'lock'

Click on Alter button.

Now again click on alter button.

Observations:

Here it is observe that when we click on alter button,it display the message

Account locked.

010P4: An output parameter was received and ignored.

When we again click on alter button it display the message

No account(s) locked.

010P4: An output parameter was received and ignored.

when we go to the login properties of "login_sample1" it is observed that "Account Locked" option is displayed as enable.

Is it the right kind of behavior when we click on alter button second time after setting "account lock" option to true?

Please refer to screenshot alter_locklogin.png.

ivangron 2015-01-28T21:11:19Z

original issue fixed: PASSWORDIMMEDIATELY will script PASSWORD IMMEDIATELY.

scenario 1: fixed : you will now be able to script drop of those 4 properties by blanking there values out.

scenario 2: fixed: This will no longer give you the empty alter statement.

scenario 3: NO FIX: This is working as designed. You must click the CHECK box if you wish to include the permission.

scenario 4: NO FIX: Continuing to click on the alter button would only re-summit the query to the server. I do not recommend this after a warning but this is how it works.

abhishekj(*) 2015-02-03T05:21:10Z

Verified in Aqua Data Studio 16.0.0-alpha-18

tariqrahiman 2015-02-03T18:47:59Z

Verified in ADS v16.0.0-alpha-18

Search Tips

Aqua Data Studio / nhilam

Sybase ASE 16.0 :Not able to alter login when we enable option 'change password immediately'.

5 attachments

Issue #12986

Completion

Search Tips

Aqua Data Studio / nhilam

Title

Sybase ASE 16.0 :Not able to alter login when we enable option 'change password immediately'.

5 attachments

Issue #12986

Completion