How to redirect user to login page instead of change password page when user enters invalid current password in the change password page?

Document ID : KB000050584
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

When a user is on change password page and enters invalid current password then he is redirected to the login page. If DisallowForceLogin registry key is set to 1 then the user is redirected to the change password page with a message stating that the current password is incorrect.

However, when the user directory is AD and DisallowForceLogin registry key is set to 0 still user who enters invalid current password in the change password page is redirected to the change password page with the message stating that the current password is incorrect.

I want the users to be redirected to login page instead of change password page when the user enters invalid current password in the change password page.

Solution:

Set the registry key HKLM\Software\Netegrity\SiteMinder\CurrentVersion\Ds\LDAPProvider\EnableSaslBind to 0 to fix the issue.

More information on the SASL protocol can be found a in the following RFC: http://www.ietf.org/rfc/rfc2222.txt?number=2222.