Event ID 8241 — UNIX to Windows Password Synchronization Service -- Run-time Issues

Updated: December 16, 2008

Applies To: Windows Server 2008 R2

yellow

UNIX to Windows Password Synchronization Service -- Run-time Issues indicates the functionality of UNIX to Windows password synchronization operations.

When Password Synchronization is configured for UNIX to Windows synchronization, and UNIX to Windows synchronization is functioning normally, passwords that are changed on UNIX hosts are synchronized on Windows-based computers and domains. The Password Synchronization pluggable authentication module (PAM) makes this possible by intercepting the password change request on the UNIX host, encrypting the password, and then sending the password change request to the Password Synchronization service running on the Windows-based computers with which it is configured to be synchronized.

Event Details

Product: Windows Identity Management for UNIX
ID: 8241
Source: Microsoft-Windows-IDMU-PSync
Version: 6.0
Symbolic Name: MSG_PASSWORD_TOO_RECENT
Message: Error changing password. Password too recent for user. %ruser = %1

Resolve

Correct password too recent error

An error occurred while attempting to change the user's password because the password has been used too recently.

Users should choose new passwords that are unique among passwords they have used to log on to the network in the past. If necessary, domain administrators can modify security policy settings that control the number of unique passwords required before users are allowed to reuse old passwords.

Verify

To verify the functional state of UNIX to Windows password synchronization, retry UNIX to Windows password synchronization. UNIX to Windows password synchronization is fully operational when the password synchronization succeeds, and functioning with warning conditions present if password synchronization fails for some passwords but succeeds for others.

If password synchronization succeeds for some passwords but fails for others, the UNIX to Windows Password Synchronization Service is likely fully operational, but there might be account- or computer-specific configuration problems preventing password changes from being synchronized on UNIX-based hosts.

Related Management Information

UNIX to Windows Password Synchronization Service -- Run-time Issues

Identity Management for UNIX

Community Additions

ADD
Show: