Change Password Operations - Generate, Spell, View

Question

We're running 2014.1.
In the change password screen the Generate, Spell Out, View Password Policy buttons are visible.
But, when we select "user must change password at next logon" these buttons are not visible. How can we make these buttons visible on both screens?

Comments

Hello Support,
Any update on this question?
Thank you.

Answer 1

Update 2018

Starting with Adaxes 2018.1, it is possible to enable/disable the Generate, Spell Out and View Password Policy options for password reset and change operations. For details, have a look at the following tutorial: https://www.adaxes.com/tutorials_WebInterfaceCustomization_ConfigurePasswordReset.htm.

Original

Hello,

Currently, you cannot add the Generate, Spell Out, View Password Policy options to this page, but thanks for the suggestion. We've decided to add the Generate and Spell Out options to this page in one of the future releases. As for View Password Policy, we are not sure whether it will be appropriate to add it. The thing is that, because of AD design, when a user is prompted to change password because their password has expired, and they see this page, such users are not yet authenticated. That is, the credentials will be checked only when the user supplies both the old and a new password. If we add the View Password Policy option to this page, this means that anyone will be able to view a Password Policy applied to a user just knowing the username, even without providing a valid password. We are not sure that this is a good idea to show Password Policies just to anyone who provides a valid username, specially when the Web Interface is in the DMZ and available from the outside. We'll need to think on that.