Notes Shared Login Failed after change password

I enabled NSL and work find.

But after Administrator change the user password in AD, then user cannot login again with error “Notes Shared Login Failed with this ID Files”

And the NSL debug mode show in local log as follow.

SECReadSecret: error returned by CryptUnprotectData: ??? (0x8009000B)

SECReadSecret: Password does not meet the requirment

SECUnlockIDFileWithNSL: Password does not meet the requirment

Please help, Thx !

Subject: Using the same pc?

Heard yesterday that you have to use the same pc, no roaming feature for NSL, except of course when using id-vault.

Subject: NSL failed login after admin change password

Yes, I am using the same PC.

The PC joined Domain. And login as a domain user.

If user change password in the pc, NSL work fine.

But if administrator change password in the domain controller for the user, then NSL will login failed.

Subject: I think you’ve hit a ‘known issue’ in the MS DPAPI

The Notes Shared Login feature uses the MS Data Protection API (DPAPI) to encrypt/decrypt information which allows access to a notes id. The error from your posting below (0x8009000B) is defined as “Key not valid for use in specified state.” and is being returned by a DPAPI function. You mentioned above that your system was added to a Windows Domain. You’ve likely run into the following issue:

You Cannot Access DPAPI Confidential Information After Joining or Disjoining a Domain

If you have joined a stand-alone computer to a domain and you have lost access to DPAPI data, you can restore access by logging on as the local user. To log on as a local user on a domain-joined computer, click the local computer’s name in the dropdown box in the Logon dialog box, and then enter your local user name and password.

If you have disjoined a computer from a domain, you must rejoin the domain and then log on as the same domain user to regain access to your files.

(from http://support.microsoft.com/kb/309408#12)

Please try the recommended steps above to see if that resolves your issue.

Subject: A couple of questions

Where is the NSL ID file located (on the computer’s local drive, on a network share, …)Did the user login to the computer where the NSL error occurred after the password was reset or was the user already logged in?

Please attach the entire log (or at least all of the NSL debug messages) so we can see the messages in context.

Thanks.

Subject: NSL Problem

  • NSL ID File local in computer’s local drive and the computer is VM

  • I tried both already, but also failed.

  • Here is the log all i found when NSL failed

SECReadSecret: error returned by CryptUnprotectData: ??? (0x8009000B)

SECReadSecret: Password does not meet the requirment

SECUnlockIDFileWithNSL: Password does not meet the requirment

Thx for response