User password change issue in 9.2

Hi All,

Users are facing problem while changing their passwords after expired, the system is accepting more than 10 characters while changing the password but by default it is allowed only 10 characters for example if user change the password to 12 chars (he doesn't get any error that password length is exceeded), when he try to login with new password then system is giving error (password is invalid), if he use first 10 chars of password then he can login so why system is accepting more than 10 chars if it doesn't work?

2nd thing when user gets the message that your password is expired then they try to change the password and enter wrong old password because sometimes they don't remember so they can't change without ask administrator. when they open the JDE site again they get following screen and they can't enter user id.