implementing remote login with "pass through" in credential provider   

I have following questions regarding password change in credential provider:

1. When we receive ERROR_PASSWORD_MUST_CHANGE in ReportResult method, what steps we should take to change the password? 

2. I am changing the password using NetUserChangePassword and passing this new password in GetSerialization (KERB_INTERACTIVE_UNLOCK_LOGON) structure which gives me bad password error. But it works after reenumeration.

3. Do we need to use KERB_CHANGEPASSWORD_REQUEST structure in this case? If yes, what should be the MessageType parameter of this structure? (MessageType parameter is NOT documented in msdn but it is there in the structure).

Thanks,
/ashwin

date: Wed, 11 Jun 2008 08:08:29 -0700   author:   Ashwin Jam

RE: implementing remote login with "pass through" in credential provid   

I've been able to serialize a KERB_CHANGEPASSWORD_REQUEST structure, the 
problem I have is that what's next. I get a message saying "operation 
completed successfully", but how do I then login? While in ReportResult my 
Credential Provider is not advised, so a refresh with autologon cannot 
happen. 

ashwin:  At least the way I’m doing it, when I receive 
ERROR_PASSWORD_MUST_CHANGE in the ReportResult method, I make my new password 
edit fields visible, and wait for the user to submit again, in that case I 
serialize a change password request. with 
MessageType=KerbChangePasswordMessage. The problem now, is that I then can’t 
do anything, the password is being changed, but the user is not being logged 
on automatically. I’m still trying to figure out what to do next...

date: Wed, 18 Jun 2008 07:08:00 -0700   author:   Nathan