Description Peter Åstrand 2008-02-06 09:38:39 CET

(Discovered during Issue5615.) If the user does a password change using keyboard-interactive, using AD, and the AD does not accept the new password, SSH will output something like (from tlclient.log):

Wed Feb  6 09:12:32 2008: Processing SSH output: SSH_PROMPT:Ange nytt passord:
Wed Feb  6 09:12:33 2008: Processing SSH output: SSH_PROMPT:Upprepa nytt passord:
Wed Feb  6 09:12:34 2008: Processing SSH output: Password too short
Wed Feb  6 09:12:34 2008: Processing SSH output: Your password must be at least 8 characters; cannot repeat any of the your previous 0 passwords. Please type a different password. Type a password which meets these requirements in both text boxes

This information does not reach the user, however. Instead, tlclient displays the message:

"Login misslyckades! Fel användarnamn eller lösenord." 

What makes the situation worse is that even if the password change is successful, due to bug 1108, a similiar message is displayed:

"Inloggningen misslyckades. (Fel användarnamn eller lösenord.)"

In this second case, there's a slight delay. while in the first case, the error message is immediate. This is probably very confusing for the users.