Front cover - IBM Redbooks

484 Lotus Security Handbook
Figure 11-10 Scheduled Adminp Task for Password Checking
4. Observe the processed Adminp task for password checking
Once the Adminp task has processed the change request, a confirmation
document is written into the Administration Requests Database, as shown in
Figure 11-11 on page 485.
By manually checking the person document for this user, you can verify that
the “Check Password,” “Change Interval” and “Grace Period” fields have
been populated appropriately.
Note that the “Password digest” field in the person document is still blank.
This is not an error since the user has not authenticated with the server
between the time password checking was enabled and now.
When the user tries to access the server using his Notes user ID (and after
certificate authentication), the Notes client checks to see if the server is
enabled for password checking and, if so, then checks the person document
to see if it is also enabled for password checking. In our example, these
checks are returned true.