Setpass does not update the NetWare password with SYSKEY (243419)



The information in this article applies to:

  • Microsoft Windows NT Server 4.0

This article was previously published under Q243419

SYMPTOMS

File and Print Services for NetWare (FPNW) server includes the setpass command-line tool (located in SYSVOL volume) to change users' password.

If both SYSKEY and RestrictAnonymous are used on the server, only the Security Accounts Manager (SAM) password is updated and not the NetWare password. The next time you log on, the NetWare connection against the FPNW server does not work and you must type your old password.

CAUSE

When the system starts, it tries to load all password notification packages. When SYSKEY is used, Fpnwclnt.dll (the notification package installed by FPNW) does not initialize because it tries to gain access to data encrypted with SYSKEY, but the key is not yet initialized by the system.

RESOLUTION

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that this article describes. Apply it only to systems that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question. The English-language version of this fix should have the following file attributes or later:
   Date         Time       Size  File name   Platform
   --------------------------------------------------
   23-Sep-1999  9:08:03  169 KB  SamSrv.Dll  I386
   23-Sep-1999  9:08:54  282 KB  SamSrv.Dll  Alpha

STATUS

Microsoft has confirmed that this is a problem in Windows NT 4.0.

MORE INFORMATION

For more information about SYSKEY and RestrictAnonymous, click the following article numbers to view the articles in the Microsoft Knowledge Base:

143475 Windows NT system key permits strong encryption of the SAM

143474 Restricting information available to anonymous logon users

FPNW includes a password notification package (Fpnwclnt.dll) which is called on users passwords changes so that it can update the NetWare password.

Modification Type:MinorLast Reviewed:10/19/2005
Keywords:kbHotfixServer kbQFE kbbug kbfix kbnetwork KB243419