When connecting to LDAP for authentication, user can still login with old password. At the same time, even new password works. What can be done so that only one password works?

When connecting to LDAP for authentication, user can still login with old password. At the same time, even new password works. What can be done so that only one password works?

The possible steps to be followed to encounter this issue are as follows: 1) Login to application 2) Change windows password 3) Logout of application 4) Login to application using old password 5) This succeeds when it should not. 6) Login to application using new password. This succeeds and it should. 7) Reboot application, old password still works and still shouldn't. 8) Reboot machine, old password still works and still shouldn't. There is an option with Windows OS to have both old as well as new passwords working for the first 1 hour. Hence, even after changing the LDAP password, it will allow the user to login using old or new password for the first 1 hour. The below-specified link provides more information on this behavior: (https://jira.springsource.org/browse/SEC-1145). Also, Microsoft recommends a setting that has to be made called "old password lifetime period". By making this setting, only the new password shall work. This varies depending on the Operating System used. The link specified below has more information on this: (http://support.microsoft.com/?kbid=906305).