AMConsole - modify password change

Hey guys and gals,
We are currently using Access Manager in conjunction with Samba to provide a primary domain controller. We are utilizing the user profile section of amconsole in order to change the users LDAP password. However, we also need to generate the Samba NT/LM hashes to syncronize the password for SSO abilities.
Currently I've written a separate web app that provides this functionality, but would like to include it into the amconsole change password functionality.
I've looked into possibly extending the UMChangeUserPassword class, however I get nothing but headaches. Is there an example of how this can be accomplished or has anyone else solved this issue?
Thanks in advance!
Joshua Preston.

Hi
I dont claim to be an expert in this field, but I think you may be able achieve this by extending the functionality of the Directory Server that stores the LDAP password. The Sun DS has a way you can include a plugin. Have a look at
http://docs.sun.com/app/docs/doc/817-7617
Now using this, if you can define a postoperation (after every password change), then may be you can achieve what you are looking for.
My 2 cents.
-MD

Similar Messages

Lotus Notes password change not working

Hi,
I'm integrating Lotus Notus and currently we are able to create users in the Domino server, so we have many doubts:
Lotus Notes Id Files are created in the Domino server, but this Id Files needs to be copied in the users own laptops or desktop pc's. What is the best way we can give the user the Id File?
For password changes: I have test password change from OIM self-service, I mean, I create a user, then I provision the user account to Lotus and finally I login with the user account to OIM user self-service interface and try to change password, connector log says everything is ok and the user Id file is correctly modified but, in Domino's server, Lotus internet/http password is not modified, so it is correct? I expect the http/internet password to be changed too. For test purposes I have to copy the new Id file from the Domino server and paste it in the client pc where Lotus Notes client is installed, I put the new password and I'm able to login, but http/internet password is not changed.
So I don't know if this is a limitation from the connector or if I miss something in order to be able to perform password changes, I have read many times connector documentation but this is not clear for me. I also have read oracle waveset Domino connector documentations but seems to work in a different way OIM do.
Please help me
Regards.

Hi SaikatDas,
Thank you for posting in MSDN forum.
Since this forum is to discuss: Visual Studio WPF/SL Designer, Visual Studio Guidance Automation
Toolkit, Developer Documentation and Help System, and Visual Studio Editor.
Based on your issue, it is related to the IIS, so I’m afraid that it is not the correct forum for this issue. therefore, I suggest you can post this issue directly to the IIS forum:http://forums.iis.net/
, maybe you will get better support.
Thanks for your understanding.
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Backup jobs and password changing problem

Hi
I have created few rman job in my db (11.2) to backup database.
I my company i have to change all system passwords (os - oracle, system, syman, etc...) every 90 days.
When i changing password for user who created backup jobs, this jobs stop working.
I,ve got "Invalid username and/or passworderror writing input to command" error.
Of course after changing passords i always setup "Preferred Credentials" but that dosn't help.
What am i doing wrog? What am i missing ?
Please advice.

If you use Preferred Credentials to authorize a Job, it will use the current credentials on the moment it is dispatched for execution.
This means that in case passwords changes, you just need to modify you preferred credentials
This is something you can do using EMCLI (command line interface) in a script for instance (or just use the GUI to modify)
checkout:
Oracle® Enterprise Manager Command Line Interface
11g Release 1 (11.1)
http://download.oracle.com/docs/cd/E11857_01/em.111/e16185/toc.htm
regards
Rob
http://oemgc.wordpress.com

Password change timestamp attribute in OID 10.1.4???

It's been suggested to me that release 10.1.4 of the OID would include a timestamp attribute that is updated every time the user changes their password. Does this exist? I know that the modifytimestamp attribute gets set everytime the user changes their password, but this won't work for our purpose because we also have a batch job that pushes account information changes to our OID from a Human Resources Department database, and this batch job can cause the modifytimestamp to be changed.

Hi,
you can easily implement this by adding a new objectclass to your users and defining such an attribute "pwdchangetime", in that objectclass.
Now, to populate that attribute , you will need a post-modify plugin (java plugin). The plugin will run after each successfull password change operation and will update the attribute for that user.
For an example on how to create such a plugin:
Oracle® Identity Management Application Developer's Guide
10g (10.1.4.0.1)
Part Number B15997-01
13.6 Java Plug-in Examples
http://download-uk.oracle.com/docs/cd/B28196_01/idmanage.1014/b15997/java_server_plugins.htm#CHDIIIBI
BR,
Octavian

ASMSNMP password change

I am trying to change the ASMSNMP password on 2 Node RAC 11 g r2 on windows 2008.
I am getting the following error any idea why ?
ASMCMD> orapwusr --modify --password ASMSNMP
Enter password: Your vendor has not defined POSIX macro ECHO, used at C:\app\11.2.0\grid\lib/asmcmdshare.pm line 2623
C:\>
Regards,

Hi,
I believe orapwusr --modify --password utility is only valid for sys user , you can change the ASMSNMP using alter user command..

Unable to modify password using security question in LPM.

We have one identity server. We have setup a Lost password management application. There is a webpass and a webgate configured for the LPM application. The communication mode is simple. The forgot password functionality is not working for the LPM application.
Steps to recreate the issue
- In the login form, user click on "I forgot my password' link
- User enter the "User ID" and then click submit
- It redirect user to a challenge question page, user provide answer to the question and click submit
- The next page confirm the user had successfully answer the secret question. And prompt user to enter new password and retype password, then click Save
- When click on save it shows "Cannot modify password". The screen refreshes. The new password is not saved.
Identity Server & Webpass version - 10.1.4.2 BP08
Thanks.

Hello,
We built a POC environment with an OID instance on an Oracle 11g database, one virtual machine with WebPass Identity Server and Policy Manager 10.1.4.2 BP07 and another virtual machine with the Access Server and a WebGate.
(plateform is RHEL4 32bits)
We have the same issue on the lost password scenario. We are bind to the LDAP in open mode with "orcladmin" user that can change user password as we can do it through WebPass UI.
When testing the Lost Password scenario after replying to secret question and trying to change the password we have the error: "Cannot modify password"
Looking at "identity/oblilx/logs/oblog.log" shows: ERROR 0x00000901 lost_pwd_mgmt.cpp:264 "Cannot modify password" loginName^xxxxx
If we change the user password with orcladmin user in WebPass UI (password policiy is set to "change on reset") the user after logs in with the new password is prompted to change it and in this scenario it works perfectly...
We have the same behavior in 10.1.4.0.1, 10.1.4.2.0, 10.1.4.2 BP7 and BP8
Well we are stuck on this issue,
Any suggestion is welcomed,
Best regards,
Edited by: Laurent_ch1258 on 22 mai 2009 01:03

DBConsole - Modify password screen...

Hi All,
My query is related to DB consoel login page. I have 11.2.0.1 DB.
In one of my DB's DBconsoel after login throug system user I can get Modify Password screen, which shows list of users whose password has expired or will expired soon. This will include many apps user and SYS, SYSTEM user too. When I verify SYS,SYSTEM password from dba_users (account_status) it shows as "OPEN".
I dont know why password scrren showing for SYS, SYSTEM user when its not actually expired.
Can anyone guide me please?
Thanks...

You asked
princy001 wrote:
Administrator is also not able to see this information. i want to make this change happen for user interface only.and you answered it
princy001 wrote:
Both the forms Change Password Form and Change User Password Form are referencing User Form Library What you need to do is :
whichever form u want to modify (end user or admin) make a copy of it, rename it and change the form and process mappng accordingly. your case u want to update end user change passwod form so rename it and change mapping accordingly. Now suppose if this form refers field x of library then u need to have duplicate of field x in library with name chnage. update your form to refer this renamed-dupliacte field of library.
Using this logic, end user and admin user password form will appear differently

Disable password change

Hi friends,
         I want to disable the password change for the user. We have few basis administrators with full authorization for SU01. So only the the user id of the respective user should have the authorization to change or modify the password...
          As the user only has the rights to change his/her password. Other users are not authorized to modify the password and they can only reset the password...
thank you...

>
KINGS wrote:
> Hi friends,
>          I want to disable the password change for the user. We have few basis administrators with full authorization for SU01. So only the the user id of the respective user should have the authorization to change or modify the password...
>
>           As the user only has the rights to change his/her password. Other users are not authorized to modify the password and they can only reset the password...
>
> thank you...
Frankly speaking I do not understand the motivation for your inquiry.
A password is a private secret - supposed to be known only by the user him-/herself. For exactly that reason the system prompts the user to change the password if the password was set by an administrator (who then also knows the password) or when the password was generated (since then the password was not chosen by the user, as well).
That kind of password change (performed by the user) requires that the user is able to present a valid current password ("old password"). Only if the "old password" was valiated successfully (s)he can set a "new password". No special authorization is required for that action.
That's different from the operation an user administrator performs (using SU01): the admin sets a new password - without being forced to know the current password. But that action requires user administration authorizations.

RBACx Encrypted Password Change Utility

Hi all,
In the OIA/SRM installation guide, there is a reference to a tool, to find out the password of rbacxservice.
"Oracle Identity Analytics utilizes an encrypted password when communicating with the database.
To change the default database password, use the RBACx Encrypted Password Change Utility"
Could you please help me finding out this tool.
Many thanks in advance.
Warm regards,
Manipradeep Sunku.

The mentioned tool only encrypts the password so that you don't have to store a plain text password in the config file. It does not decrypt it. The default rbacxservice password is rbacxservice.
The tool does not come with the OIA/SRM distribution so if you need it, you will need to contact support.

ACS 5.3 UCP Password Change

Hi at all,
i have a Problem with the UCP Webside Password Change.
The Side is running without Problem. A Password Change for the normal User is also o.k.
Here me Problem.
I will use this Side also for our Admins to Change here Password but this User has also a Enable Password.
Is it Possible to Change also this Password with the UCP Webside?
Thanks for help.
regards
Andreas

Hey Tushar,
That is our current setup. Right now each user logs in with their AD credentials to get into user exec mode and the same password to get into privileged exec mode. I would like to have a user login with their normal AD credentials to get into user exec mode and a different password (specific to each user, not locally on the device) to login to privileged exec mode. We are doing this for security reasons. Hopefully that clarifys what I'm trying to do.
Thanks

User Password change fails in OWA 2013

User Password change fails in OWA with this error: Your password couldn't be changed. Make sure the old password you typed is correct and that the new password meets the minimum security requirements.
We are migrating from Exchange 2007 to Exchange 2013. Have mailboxes in both environments. OWA 2007 password changes succeed (user mailbox is still in Exchange 2007). When the user mailbox is moved to Exchange 2013, password changes fail
with the above error.
We have the Exch 2013 servers are on Windows 2012 and we are running Exch 2013 CU3. We have made changes to the Default Role Assignment Policy to prevent users from changing Contact information and setting user photos, etc. We are not exactly
sure when user password changes stopped working, or even if they ever did work, although we recently installed our Prod Exch 2013 servers alongside our 2007 servers without any RBAC delegation implemented and a quick test of a user password change was successful.
I reversed all the changes to the Default Role Assignment Policy but the password change still fails.

Hi,
Please try the following steps in your CAS server:
1. Click Start > Run and type regedit and click OK.
2. Navigate to the "HKLM\SYSTEM\CurrentControlSet\Services\MSExchange OWA" key.
3. Set the ChangeExpiredPasswordEnabled value from 1 to 0.
4. Close regedit and re-open it.
5. Set the ChangeExpiredPasswordEnabled value from 0 to 1.
6. Close regedit.
7. After you configure this DWORD value, please reset IIS. The recommended method to reset IIS is to use IISReset /noforce from a command prompt.
Here is the similar thread about password change issue in Exchange 2013 CU3, please refer to:
http://social.technet.microsoft.com/Forums/en-US/30b74c81-9b98-46f4-9ca0-1c3bb74f4a3f/users-with-expired-passwords-or-change-password-at-next-logon-unable-to-change-password-via-owa-in?forum=exchangesvrclients
Hope it helps.
Thanks,
Winnie Liang
TechNet Community Support

Is autoconfig required to be run for apps password change

Is autoconfig required to be run for apps password change -- We are only changing APPS and APPLSYS passwords.
How to Change Applications Passwords using Applications Schema Password Change Utility (FNDCPASS or AFPASSWD) [ID 437260.1] -- does not mention anything about autoconfig.
Please clarify.
Thanks

It's mentioned in the document twice
1. For APPLSYSPUB/GUEST as you mentioned
2. Under "Verify the new password" which cover the apps/applsys passwords
If you search the doc for "AutoConfig" you will find it there.
Thanks,
Hussein

Weblogic admin user password change w/o disrupting existing users

Hi Folks,
As a business policy we need to change the password of the admin user in weblogic after a cycle of specific period.
Please let us now how can we do that without losing the other existing users in 'my realm.'
I understand that we can use the weblogic.utils.security.AdminAcoount utility to give the new password, which will create a new DefaultAuthenticatorInit.ldift file in +<domain-home>/security+ folder (according to Doc ID 1082299.1).
The password will change but the users in 'my realm' will be lost. (there are many users and it is a production environment so recreation is out-of- question)
Is there a way we can retain the users and still proceed with the password change?
Cheers,
Jeegar

Hi Jeegar,
This can be doen by followin the standard procedure by login to console and navigate to :-
DOMAIN_STRUCTURE--->Security Realm--->myrealm--->Users and Groups---->User tab click on the user weblogic
--click on the password tab and put the new password there and save (password is changed for the user here)
---Logout from the console and login to the console again using the new password
But when the server starts it do not read the password for the user directly from the realm rather it picked the same from the $DOMAIN_HOME/servers/AdminServer/security/boot.properties
Now in order to make this change available when the server starts change the values for the username and password in boot.properties and specify them in plain-text and save the same.
Now next time whenever the server will start it will pick up the new values from the boot.properties and once the same had been accepted those will be encrypted again.
You might have to make the change for the boot.properties for all the Managed Server if you have the Managed Servers in the domain which will be located at the location $DOMAIN_HOME/servers/<<Managed Server Name>>/data/nodemanager/boot.properties
You can test the steps on some lower environment first and try the same in Critical environment once the testing goes successful.
Regards,
Vijay
Edited by: V Kumar on Oct 25, 2012 3:06 PM

Airport Extreme WiFi password change

I want to change the network password on my Airport router. When I open Airport Utility it attempts to locate the Airport base station but never finds it. It says "no configured Airport base stations have been found...will continue searching" The Airport is working and is connected to the Internet. I have Wifi access from this Mac & mobile devices in the house.
Any ideas on what I can do to access the base station to make the password change?

Also, is your Mac connected to the AirPort Extreme/Express (either by ethernet cable or the AirPort's own wifi) or might it have gotten connected to some other wifi network (possibly associated with your ISP's modem, gateway, or router)?

Outlook 2013 - Password change breaks S/MIME Certs "An error occurred in the underlying security system. Key not valid for us in specified state."

AD password change comes up, user changes password.
Tries to send signed or encrypted email with a Comodo S/MIME certificate, and gets the following error:
""An error occurred in the underlying security system. Key not valid for us in specified state."
I now have two reports of this error - one on Windows 7, and one on Windows 8.0 (remote user).
The one on Windows 8.0, we tried removing their S/MIME cert from Outlook/Windows and re-adding, this did NOT resolve the issue.
Plan was originally to have the 8.0 user ship their machine in, and wipe it, since nothing else could fix it and I wasn't finding anyone else with the same issue. Now that I've got a second user with the same issue, its looking like a bug/issue and
not a random glitch.
Thanks in advance for any and all help with this!

Hi,
Thank you for your question.
I am trying to involve someone familiar with this topic to further look at this issue.
Thanks,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

AMConsole - modify password change

Similar Messages

Maybe you are looking for