View source for I have changed User password and still able to connect

New password will become valid when user re-login to the system. Until then connection data is store in browsers cache and server.

If you want to force user to enter new password you should clear sessions from server.

In order to do that:

1. Connect to server via SSH

2. Enter commands:

 rm -rf /dev/shm/sessions/*
 service httpd restart

After that your customer will be kicked-out from GUI and will need to enter password.