Valid DN and empty password returns Success on Bind, other chance ?

In our infrastructure we have one central IPlanet Server, running Version 4.16 and 23 secondary IPlanets, running Directory Server Version 5.2.
At this point we like to authenticate our OpenGroupware.org Users against LDAP.
Now the following problem occurs :
When a user binds to the LDAP Server with his distinguished name and no password the IPlanet thinks its an anonymous connect and replies "Success" on the bind. The User is logged in. But the right answer would be Returncode 49 -> Invalid Credentials.
There is no chance in OpenGroupware.org to deny those Null-Passwords, so i have the following question :
Can i force the IPlanet to give the LDAP Status-Code 49 for those Null-Password Bindings ?
Thanks in advance
Frank

Ok, I am not a decent C programmer. I found the Plugin Programming Guide and will start with hello.c, perhaps i can program a small "if (password=="") { return 1; } or something like that.
Thanks for your help !
If anybody has a plugin code with the above function, contact me.
Frank

Similar Messages

Qingy and empty passwords

Hi.
Is there a way to login with empty password using qingy? I haven't found anything about this question.
Maybe another lightweight login manager that allows empty passwords exists?

Does that mean I need to make some configuration
changes on the server to disable anonymous binds?Yes, this usually involves removing specific ACI attribute
from a top level entry and possibly other enties.
Or
can I do something in JNDI?You can do this through JNDI since ACI attributes usually
behave in the same way as any other entry attributes.
Artur...

ODBC functions SQLExecDirectW and SQLExecute functions return error:"DIAG [22001] [Microsoft][SQL Server Native Client 10.0]String data, right truncation (0) "

Problem Description:
ODBC functions SQLExecDirectW and SQLExecute functions return error:”DIAG [22001] [Microsoft][SQL Server Native Client 10.0]String data, right
truncation (0) “. When we enable tracing in the ODBC administrator, in the SQL.log we see that values for the arguments: ColumnSize, BufferLength, and StrLen_or_IndPtr of ODBC function SQLBindParameter are not being displayed.
Environment Used:
OS: Microsoft Windows Server 2003 R2 Standard x64 Edition.
Complier: Microsoft Visual Studio 2008 SP1 for x64.
Database: Microsoft SQL Server 2008
MDAC: Microsoft Data Access Components SDK 2.8
Note: This problem is seen only in our 64bit application. However, in 32bit
SQLExecDirectW and SQLExecute functions return successfully.
As we could not find the values of 6<sup>th</sup>, 9<sup>th</sup> and 10<sup>th</sup> arguments(ColumnSize,
BufferLength, and StrLen_or_IndPtr) passed to
SQLBindParameter in the ODBC traces for 64bit, we are not sure whether the values for the above mentioned arguments are received correctly by SQLBindParameter or not. This information would help us to debug further. So, could you please let us know why
these values are not displayed.
1)Here is the extract of the SQL.log file for 32bit where the values for SQLULEN , SQLLEN and SQLLEN* are displayed properly:
PR0CNFG 1028-15f0 ENTER SQLBindParameter
HSTMT 0x006FBDD8
UWORD 1
SWORD 1 <SQL_PARAM_INPUT>
SWORD -8 <SQL_C_WCHAR>
SWORD -9 <SQL_WVARCHAR>
SQLULEN 23
SWORD 0
PTR 0x0595EBBA
SQLLEN 46
SQLLEN * 0x05A5FB00
2)Here is the extract of the SQL.log file for 64bit where the values for SQLULEN , SQLLEN are not displayed properly and
SQLExecDirectW function return error:”DIAG
[22001] [Microsoft][SQL Server Native Client 10.0]String data, right truncation (0) “. :
PR0CNFG a78-fe4 ENTER SQLBindParameter
HSTMT 000000000431D2F0
UWORD 1
SWORD 1 <SQL_PARAM_INPUT>
SWORD -8 <SQL_C_WCHAR>
SWORD -9 <SQL_WVARCHAR>
SQLULEN SQLULEN SWORD 0
PTR 0x0000000005364EFA
SQLLEN SQLLEN
SQLLEN * SQLLEN *
PR0CNFG a78-fe4 EXIT SQLBindParameter with return code 0 (SQL_SUCCESS)
HSTMT 000000000431D2F0
UWORD 1
SWORD 1 <SQL_PARAM_INPUT>
SWORD -8 <SQL_C_WCHAR>
SWORD -9 <SQL_WVARCHAR>
SQLULEN SQLULEN SWORD 0
PTR 0x0000000005364EFA
SQLLEN SQLLEN SQLLEN *

Hi Nalsr,
From my research, I found:
"[Microsoft][ODBC SQL Server Driver]String
data right truncation" error may be returned from a call to
SQLBindParameter if the size of the string parameter being used is greater than the size of the column being compared to. In other words if the
string size of the <expression> to the left of the <comparison_operator> is less than the
string size of the <expression> to the
right, ODBC may return this error.
The resolution is to make the string size of the <expression> to the
right of the <comparison_operator> less than or equal to the
string size of the <expression> on the left.
It is difficult to track down this type of problem when third party development applications are being used. ODBC Trace can be used to help determine if this problem is occuring.
Here is an example where the customer has submitted a query "select count(*) from type1 where type1 = ?", type1 is varchar(5) and the
data type being passed by the application is char[9].
Here is the relevant portion of the trace. The following information from the "exit" of SQLDescribeParam
SWORD * 0x0095e898 (12)
UDWORD * 0x0095e880 (5)
Maps to the following with the actual value in parenthesis - SQL_VARCHAR Size 5:
SQLSMALLINT *DataTypePtr
SQLUINTEGER *ParameterSizePtr
The "exit" value from SQLBindParameter provides the following
information:
SWORD 1 <SQL_PARAM_INPUT>
SWORD 1 <SQL_C_CHAR>
SQL Data Type SWORD 12 <SQL_VARCHAR>
Parameter Size UDWORD 5
SWORD 0
Value PTR 0x0181c188
Value Buffer Size SDWORD 5
String Length SDWORD * 0x0181c103 (9)
The string length parameter is the length of the
string being bound to the parameter, in this instance there is a size mismatch which results in the SQLError and the SQLErrorW with the message "[Microsoft][ODBC SQL Server
Driver]String data
right truncation" .
Hope this could be helpful.
Best regards,
Halin Huang

"password" and "retype password" fields

hi all,
how do i get two textfields like password and retype password to validate against each other in javascript, the two textfields names are declared below as well as the button that will hopefully call the javascript
can anyone help?
<input type="password" name="txtUserNewPassword">
<input type="password" name="txtUserReTypeNewPassword">
<input type="submit" name="btnUpdateUser" value="Update" action="<%= response.encodeURL("UpdatedUserDetails.jsp")%>">

The action attribute should be on a form tag. It doesn't apply to a submit button.
If you need dynamic actions depending on which button you push, you need to change the forms action in javascript.
To run javascript, you need to specify an onclick event on the button.
If you return false from the event, the submission will be cancelled, and they can fix it on the client side.
Something like this:
<script>
function passwordsAreSame(){
    p1 = document.myForm.txtUserNewPassword.value;
    p2 = documetn.myForm.txtUserReTypeNewPassword.value;
    if (p1 != p2){
      alert("Please check the passwords are the same");
      return false;
    return true;
</script>
<form name="myForm" action="<%= response.encodeURL("UpdatedUserDetails.jsp")%>" method="post">
<input type="password" name="txtUserNewPassword">
<input type="password" name="txtUserReTypeNewPassword">
<input type="submit" name="btnUpdateUser" value="Update" onclick="return passwordsAreSame()">
</form>Cheers,
evnafets

Prevent user change PO data except Validity start , Validity end and ...

Hi,
I use BAdI: ME_PROCESS_PO_CUST method:PROCESS_ITEM to check if any change PO data after that PO was released. The change will accept only if the changed fields were Validity start, Validity end and Delivery date.
If user change other fields, i use the BAdI to set data in that field back to old data. My problem is when user delete item the field Delete Indicator was set to 'L' so i change it back to blank by method set_data but it still show delete indicator in PO screen.
anybody has any idea?!
best regards

Hi Chantima,
This is only a guess as I did not have time to validate...but only certain fields can be changed in the PROCESS_ITEM method...look at the structure MEPOITEM_TECH for the list that cannot be changed by the customer badi...your delete flag setting may be in there or the setting of the delete flag may update a field in this structure....
You may want to take a different approach and stop the changes from being made instead of backing them out....couple of possibilities include...
A. Restrict all users on this Tcode and PO document type I would look at the configuration in MM->Purchasing->Define screen layout at Document level. You can make fields display only instead of coding a solution.
B. If you have to have more control than provided in the config or need to code the solution, you may want to investigate using the Field selection methods (all start with FIELDSELECTION_*) to stop the changes from being made instead of backing them out after the changes are made.
Good luck.
Rob

You must supply a valid username and password in Hyp 11.1.1.3.0

HI,
We have successfully installed New version of Hyperion 11.1.1.3. Configuration is successfull. When running validation one error occurs.
We are unable to log in workspace as we are required to 'supply a valid username and password'. We log in as admin/password but this is not working.
When I change it is shared services console it does not solve this issue.
Can you please advice of what shall be done to get over this?
thank you
lubos

This is not the Hyperion/Essbase forum.

Random errors UMExceptions: Mapped user ID and/or password empty

Hi,
I am using the following piece of code to perform usermapping in the portal:
IUserMappingData iumdata= umService.getMappingData(r3SystemConfig.getSystemName(), user);
Map map= new HashMap();
map.put("user", sapUser);
iumdata.storeLogonData(map);
There is no need for a password in the map as this has been configured already.
The strange thing is that i seem to be getting random "UMExceptions: Mapped user ID and/or password empty errors". When i say random, i mean at certain times of the say it fails for 100 users and another time it fails for a different group of 100 users. Some times it works for all, sometimes it fails for all.
Does anyone know what kind of connections this method is dependent on? What could be causing this? Furthermore even though the UMException was thown, it seems like the usermapping was actually successfully completed.

Hi Sameer,
You may have problems if you used a password longer than 8 characters. Try this SAP note 669848.
Go thru this
<a href="http://help.sap.com/saphelp_ep60sp2/helpdata/en/6d/4cc63d3b3ffb4fe10000000a114084/content.htm">document</a> also.
Also make sure that u access the portal with the fully qualified domain name. This prob also occurs when u try to access the portal using IP address instead of the domain name.
Regards,
Pooja.
Message was edited by: Pooja S

My ipad has stopped updating apps. It doesn't even ask for password, it just oges to the apps screen showing empty progress bars. I've re-synced account and restarted but with no luck. Other than deleting the apps is there anyway around this?

My ipad has stopped updating apps. It doesn't even ask for password, it just oges to the apps screen showing empty progress bars. I've re-synced account and restarted but with no luck. Other than deleting the apps is there anyway around this?

OK. I will work backwards.
You certainly don't want to have to delete apps every time that they need an update, for any number of reasons. Losing data first and foremost would be a drag, but the overall hassle would be absurd. All things being equal, you should be able to update apps in the future after you delete them and reinstall them. I delete and reinstall apps all the time and I am also able to update them when updates are available for the apps. I just wanted to know if you had any success in any fashion installing apps.
Resyncing/refreshing the Apple ID/iTunes account wouldn't seem to be the issue either if you can download apps or other content from the iStores. Your ID is being accepted.
That leaves us with I'm not sure what. But I think I would try this trick fix and see if it helps.
Go to Settings>General>Date and Time>Set Automatically>Off. Set the date one year ahead. Try to update the apps again. If you get an error message, go back to the settings. Correct the date and time (set automatically) then go back and try to update the apps again.

Why will i cloud refuse to log me in even with the right apple ID and password. I keep having to reset my password but i always get an answer that I have a valid ID and password but it is not an icloud account

getting the same answer everytime I try to log into i cloud. I get a message that I have a valid ID and password but it is not an icloud account. I have tried for almost a entire year to go there. i have re-downloaded the icloud contorl panel. before I got this notebook HP windows 8 it was easier . I do not like Internet explorer so I downlloaded.Google chrome. What must I do to go to icloud? I tried Internet Explorer and chrome. I buy music on itunes and I am not sure I get all the content I purchase. I have had to reset my password often and my email address to. I once spoke to a live tech a long while ago and he helped me combine all my purchased and downloaded music. Now its impossble to talk to anyone on the phone or even online and i am frustrated.

You must create the account using an Apple device, a Mac (Lion or greater) or an IOS device (IOS5 or greater). Having done that you will be able to sign in from your Windows machine.
FYI, iCal is an application that can display calendars from iCloud (and others) it is not a calendar itself, merely a calendar client. In Windows Outlook is the calendar client.

Email send/receive suddenly doesn't work ; can't change email settings as BB phone won't accept valid username and password -- what to do?

email send/receive suddenly doesn't work (as of September 24th); I can't change email settings (one suggestion from tech) as BB phone won't accept *valid* username and password -- what to do?
I understand from a support note that if I keep trying my password/username combination, my BB will eventually delete all data!
I can't understand this. I'm completely lost now. I can't remember what I've done or tried to do. A plethora of usernames and passwords is swimming in my head.
Thanks for any hints. I have always loved this BB Bold and have never had any trouble with it.

But the real question is why for the past year did the passwords work and then all of the sudden after this anomaly the disk password doesn't work? I'm not 100% sure of what my configuration was, but I know that most of the time it required one password -- supervisor, and occasionally it asked for 2 -- disk password as well I believe. This may have been related to the Password on Restart setting I think -- asking for the disk password on cold vs. warm boot. But I know both were exactly the same. But after this incident only the Supervisor password worked.

The power went out and when it returned the network name and password was lost. I can see the network in my connections and connect to it. How do I get it back to the orginal name and password. I have an HP laptop

The power went out and when it returned the network name and password was lost. I can see the network in my connections and connect to it. How do I get it back to the orginal name and password? I have an HP laptop.

Chances are, there was a signficant power surge or voltage fluctuation just before the power went out. This type of thing can cause the AirPort Extreme to reset back to default settings.
If this occurs, your only option is re-configure the device again, just as you did originally.
In order to improve your chances this next time this happens, (especially if you live in an area where thunderstorms are severe), a good quality surge suppressor / voltage limiting power strip will really help, and may save you the entire device or a nearby computer next time something like this occurs.

You must supply a valid username and password to log onto the system.

hi,
i installed hyperion performance suite8.3 on linux by root account,during installation, i select "native" authentication, after installation, when i login the web interface by root account, it tell me:
You must supply a valid username and password to log onto the system.
who can help me?
thanks

Do you have any projects listed in Shared Services ?
... you are also using
Did you put in the right url when you did the HFM config ?
check the httpd.conf file for server name and listening port number ....
what port are you using to login to workspace ?

Help with "Admin user requires valid username and password" on fms2_console.swf page

Just installed FMS2 on Debian (etch, 2.16.5-1 kernel). When I
connect to localhost:1111/fms2_console.swf and get the infamous XML
output which includes the text, "Admin user requires valid username
and password." The *.xml and *.ini files haven't been touched after
installation. All four daemons (fmsedge, fmsmaster, fmscore,
fmsadmin) are running and listening on the correct ports.
Any tips? (I'm sure this is easy to solve...)
Thanks.

Hi,
FMIS 4.5 does not accept plain text password. Encrypt=false is no longer supported. See here for more information : http://help.adobe.com/en_US/flashmediaserver/configadmin/WS5b3ccc516d4fbf351e63e3d119f2926 bcf-7fed.html#WS5b3ccc516d4fbf351e63e3d119f2926bcf-7e91
The value for SERVER.ADMIN_PASSWORD needs to be the encrypted string for your password. That should solve your problem.
Hope this helps.
Thanks,
Apurva

Entering into site using valid id and password through URL class

hi......
i need to access the google adwords editor site. I have account on that but i want to access that by using URL class and then i need to use some data on getting response. It is very urgent for me. Whats the drawback is i am unable to handle the cookies send by the server. Can any one help how to get the response from that by handlin cookies or sessions through program. I have valid id and password.
Thanks in advance.
Regards...............
v.suresh

Thanks for the response.
I attempted to remove cookies, but I can not identify any of the cookies on the list with the PrimeVest web site. No PrimeVest, no PVs, nothing that looks like it came from them.
I have also reported the problem to PrimeVest and their tech did answer. He suggested erasing the browsing history (temporary internet files), which I did with no effect. He also had me check for the correct starting page address, which was OK. He stated that they are aware of a problem and it is on their list. No indication of how far down that list though. His only cure was to use IE for now, which I was already doing. Perhaps he can tell me which cookies to remove.

Admin Console - Admin user requires valid username and password

I am running FMIS4.5 on CentOS5.5
FMIS is running and I can connect via Flash Media Encoder.
Web displays and admin console :1111 gives xml output, however
When using the user & password in my xml files to login (testing with ping), I get the "Admin user requires valid username and password" error.
conf/fms.ini:
# fms.ini contains substitution variables for Flash Media Server          #
# configuration files. Lines beginning with '#' are considered comments. #
# A substitution variable is in the form <name>=<value>. Everything up to #
# the first '=' is considered the name of the substitution variable, and #
# everything after the first '=' is considered the substitution value. If #
# you want a substitution variable to have leading or trailing spaces,    #
# enclose the value around double quotes. For example, foo=" bar "        #
# This section contains configurable parameters in Server.xml #
# Username for server admin
# For example:
#    SERVER.ADMIN_USERNAME = foo
SERVER.ADMIN_USERNAME = Admin
SERVER.ADMIN_PASSWORD = str34m1ng
# IP address and port Flash Media Admin Server should listen on
# For example:
#    SERVER.ADMINSERVER_HOSTPORT = :1111
SERVER.ADMINSERVER_HOSTPORT = :1111
# User id in which to run the process (Linux Only)
# For example:
#    SERVER.PROCESS_UID = 500
SERVER.PROCESS_UID = 500
# Group id in which to run the process (Linux Only)
# For example:
#    SERVER.PROCESS_GID = 500
SERVER.PROCESS_GID = 500
# License key for Flash Media Server
# For example:
#    SERVER.LICENSEINFO = XXXX-XXXX-XXXX-XXXX-XXXX-XXXX
SERVER.LICENSEINFO = #SORRY YOU DON'T GET TO SEE THIS#
# LIVE_DIR denotes the full path of sample "Live" application's
# folder for storing any live stream recorded by server.
# For example:
#    LIVE_DIR = <FMS_Installation_Dir>\applications\live
LIVE_DIR = /opt/adobe/fms/applications/live
# VOD_COMMON_DIR denotes the full path of sample "VOD" application's
# folder for storing onDemand and Progressive Download .flv/.mp3 files.
# File stored in this folder can be streamed and are also PD-able.
# Note : If you are using the default installation of Apache as a webserver,
# and if you modify VOD_COMMON_DIR, please change the document root
# accordingly in httpd.conf.
# For example:
#    VOD_COMMON_DIR = <FMS_Installation_Dir>\webroot\vod
VOD_COMMON_DIR = /opt/adobe/fms/webroot/vod
# VOD_DIR denotes the full path of sample "VOD" application's
# folder for storing onDemand only .flv/.mp3 files. Files stored in
# this folder are not PD-able
# For example:
#    VOD_DIR = <FMS_Installation_Dir>\applications\vod\media
VOD_DIR = /opt/adobe/fms/applications/vod/media
# The maximum size of the FLV cache, in megabytes.
# The default is 500MB.
SERVER.FLVCACHE_MAXSIZE=500
# Whether to start and stop the included HTTP server along
# with FMS.
SERVER.HTTPD_ENABLED = true
# This section contains configurable parameters in Adaptor.xml #
# Application directory for the virtual host
# For example:
#    VHOST.APPSDIR = C:\myapps
VHOST.APPSDIR = /opt/adobe/fms/applications
VHOST.ALLOW = all
# This section contains configurable parameters in Application.xml #
# List of semi-colon delimited paths in which to search for script to load
# For example:
#    APP.JS_SCRIPTLIBPATH = C:\scripts;C:\Program Files\Foo\scripts
APP.JS_SCRIPTLIBPATH = /opt/adobe/fms/scriptlib
# This section contains configurable parameters in Logger.xml #
LOGGER.LOGDIR =
# This section contains configurable parameters in Users.xml #
# Enable or disable using HTTP requests to execute admin commands.
# Set to "true" to enable, otherwise it will be disabled. The
# actual commands permitted for server admin and virtual host admin
# users can be set in Users.xml.
USERS.HTTPCOMMAND_ALLOW = true
Users.xml:
<Root>
    <UserList>
        
        <User name="${SERVER.ADMIN_USERNAME}">
            
            <Password encrypt="false">${SERVER.ADMIN_PASSWORD}</Password>
            
            
            
            
            
            <Allow>All</Allow>
            
            
            
            
            
            <Deny></Deny>
            
            
            
            
            <Order>Allow,Deny</Order>
        </User>
        <User name="janedoe">
                <Password encrypt="false">S4mpl3P4ss</Password>
                <Allow></Allow>
                <Deny></Deny>
                <Order>Allow,Deny</Order>
        </User>
    </UserList>
    <AdminServer>
        <HTTPCommands>
            
            
            
            
            
            
            
            <Allow>ping</Allow>
            
            
            
            <Deny>All</Deny>
            
            
            
            
            
            <Order>Deny,Allow</Order>
        </HTTPCommands>
    </AdminServer>
</Root>
Output on :1111/admin/ping?auser=Admin&apswd=str34m1ng :
<result>
<level>error</level>
     <code>NetConnection.Connect.Rejected</code>
     <description>Admin user requires valid username and password.</description>
     <timestamp>Thu 17 May 2012 11:33:43 AM EDT</timestamp>
</result>
Connections do not work from both localhost and external connections and the fms_adminConsole.htm (.swf) fails as well.
Any assistance is appreciated!

Hi,
FMIS 4.5 does not accept plain text password. Encrypt=false is no longer supported. See here for more information : http://help.adobe.com/en_US/flashmediaserver/configadmin/WS5b3ccc516d4fbf351e63e3d119f2926 bcf-7fed.html#WS5b3ccc516d4fbf351e63e3d119f2926bcf-7e91
The value for SERVER.ADMIN_PASSWORD needs to be the encrypted string for your password. That should solve your problem.
Hope this helps.
Thanks,
Apurva

Valid DN and empty password returns Success on Bind, other chance ?

Similar Messages

Maybe you are looking for