Can Communication User Id change its password

Hello Experts,
Can Communication User Id change its own password and can the password be deactivated automatically even after when its used?
Regards,
Sums

Note that if either Communication or System users have authorizations themselves for the user management (S_USER_GRP actvt '05' for the assigned user group) then they will both be able to change passwords (including their own if in that group or not assigned to one).
This is different to changing your own password voluntarily or being forced to by system password rules, but it is also a possibility you should ideally rule out (admin auths for RFC to change passwords).
Unfortunately, several RFC functions and transactions make "bogus" checks on exactly this authorization but do not need them. You you need to be carefull with it. Particularly anything relating to Business Parter functions should be very suspect if you find it in an authorization trace - it is not needed.
Cheers,
Julius
Edited by: Julius Bussche on Sep 20, 2011 10:30 PM

Similar Messages

User cannot change expired password at logon

Hi
I've got 4 Fujitsu laptop with Windows 7 business SP1 x64 (Fujitsu setup). When the domain password expired, users cannot change their password at logon. Also, they can change password in their opened session before it expire (CTRL+ALT+DEL ==>
change password).
The change password at logon windows is buggy : It only display one field to put password in, the confirmation field does not display.
When user valid is change, Windows display error "wrong username or password ". Only way to unlock this situation is to reset user password in ADUC and never let expire.
I seen no sofware or driver wich could interfe.
Domain controler (only one) is Windows server 2012 standard.
Has somebody ever seen this type of problem ?

Hi,
Can you post a screenshot for this situation?
Sometimes, the third party credential provider would lead to some issue like this, I suggest you check the
current credential provider via the following path:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\SessionData\x\LastLoggedOnProvider
You should compare the result with the values in the following path:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\credential providers
If the current value is third party credential provider, try to disable it:
To disable the provider add a REG_DWORD value "Disabled"=1 to that provider’s CLSID subkey.
The provider will be disabled on the next session creation (sessions are created when you log off, switch users, or reboot.
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

ISE 1.2 Guest portal user cannot change their passwords

I have a WLC 5508(version 7.6) and a server installed the ISE (version 1.2.1.198)，Now we configured the CWA，Use guest portal as an employee and guest login url，We can use the manually create internal user and password successfully logged in, and we set up allow guest users to change password in Multi-Portal, but the user can not change the password in the guest portal ,I suspect the change password option on the Guest Portal actually works? Can anyone tell me how to change their own username password in the guest portal ?

Requiring Guests to Change Password
You can allow or require guest users to change their password after their initial account credentials are created by the sponsor. If guest users change their passwords, sponsors cannot provide guests with their login credentials if they are lost. The sponsor must create a new guest account.
You can either allow guests to change their passwords, or you can require that they do it at expiration and at first login. To require internal users using a guest portal to change their password upon their next login, choose Administration > Identity Management > Identities > Users . Select the specific internal user from the Network Access Users list and enable the change password check box.
Before You Begin
Create a Guest portal or modify the DefaultGuestPortal. This setting is specific to each Guest portal.
Step 1 Choose Administration > Web Portal Management > Settings > Guest > Multi-Portal Configuration.
Step 2 Check the Guest portal to update and click Edit .
Step 3 Click the Operations tab.
Step 4 Check either or both options:
Allow guest users to change password
Require guest users to change password at expiration and first login
Step 5 Click Save .

What are the possible reasons why I cannot reactivate using my AppleID, even though I already change its password with the help of Apple personel

What are the possible reasons why I cannot reactivate my Iphone5 using my AppleID, even though I already change its password with the help Apple personel

If the password for your Apple ID works at id.apple.com > Manage Apple ID, then it's likely that the Apple ID the device wants you use is not the same as the Apple ID you are using.
Exactly what screen are you at on your iPhone? It sounds like it is in Activation Lock.

Using alter user to change oracle password for logged in web user on XE

Hi All
I'm building an app using the pl/sql web toolkit on XE (installed on Win XP Pro SP2). (I'm not using the APEX front-end).
I'm using basic authentication and oracle database user accounts, and when a user registers for the first time I create them an oracle user account with dynamic sql, followed by some initial setup stuff, and they then log in with it.
All fine so far.
However I want to allow the user to change their oracle password as part of maintaining their user details. I've done this in the past using the web toolkit and Oracle 9i and it has worked fine using dynamic sql.
Unfortunately I can't get the same thing to work in XE.
For example, if I create the following procedure in the schema aligned to the DAD which holds my application and then run it from a browser (IE or Firefox) then the
Browser and the db just hangs - not even an error message:
CREATE OR REPLACE PROCEDURE ut
AS
v_stmt varchar2(300);
BEGIN
HTP.htmlOpen;
HTP.headOpen;
HTP.title ('User Test');
HTP.headClose;
HTP.bodyOpen;
v_stmt := 'alter user "'||user||'" identified by "BERT"';
htp.print(v_stmt);
EXECUTE IMMEDIATE v_stmt;
htp.print('Done');
HTP.bodyClose;
HTP.htmlClose;
END;
If I run the same statement in SQL*plus it's fine, and if I run the same proc for a different user then it's fine too.
I'm sure it's something to do with trying to change the credentials of the currently logged in user, but I would at least have expected an error message.
I'd be grateful for any ideas.
Thanks
Steve

Hi g.myers
Thanks for your response.
Sorry, yes, bad turn of phrase there. It's not the entire db that hangs. The web browser (either IE or FF) hangs, and if I look at v$session at this point, I can see that the user STATUS=ACTIVE and the STATE=WAITING.
I should also point out that I am using standard Oracle users as users of the application, (e.g. create a new user account called TESTER1). These users are then granted the appropriate privileges on the owning schema in order to run the app, access the tables etc.
Therefore it is the user account (e.g. TESTER1) that is running the password change procedure that is owned by the SYS schema. (However again, this is the exact code and method that I've used in the past and it has worked fine).
If I leave the browser hanging long enough, it will eventually return with the following error:
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /h/hopapp.pwdmaint_do.
Reason: Error reading from remote server
cheers
Steve

How to restrict users cannot change their password

Hi all,
If i logon to E-Business Suite home page, click on the preferences icon on the right hand top corner of the home page, i have an option to change my password.
How will i diable or restrict this such that no users can change their passwords after first time creation.
Regards,
Prasad

hi prashant,
i could do this by logging in as sysadmin, personalizing that particular page (preferences) and setting it for only site and org. it is effected for all the users
Thanks for reply
Prasad

How to stop an unauthorized user from changing my password.

How do I block an unauthorized user from constantly changing my password?
I had an old iPod Gen 4 stolen and someone from China is downloading Apps (I get email alerts when they download something and the last message said the computer used is registered in China). I have changed the account password many times. However, days later, I will get an alert email that my password was changed (not by me), or I will try to purchase something and my password will not work. How else can I block this person from changing my password so he/she can use my account? Will changing my user email address work? Should I deactiviate all authorized computers to wipe them out? I do not have any credit cards tied to my account, so they are only downloading free apps.

Hi Gradux,
Welcome to the Apple Support Communities! In this situation, I suggest contacting the application developer. The information on how to do that can be found in the following article.
iOS: An app you installed unexpectedly quits, stops responding, or won’t open
http://support.apple.com/kb/ts1702
Contact the developer
If you see the issue again, contact the developer of the app for help:
Find the app in the App Store.
Tap the app and tap Reviews.
Tap App Support.
I hope this helps,
-Joe

Allow DB user to change their password

Greetings,
DAD authenticated access to HTMLDB 2.0 on 10gR1 on hpux.
I have built a "account" page where among other things the users can change their passwords, I have built the page over anonymous PL/SQL (below). When a DAD authenticated user runs the page via HTMLDB, they get
ORA-01031: insufficient privileges
Error. Yet if I copy the PL_SQL as is into sqlplus and bind it... it works like a charm. Any ideas?
the PL/SQL
DECLARE
BEGIN
if (:P17_NEW_PASSWORD_1 IS NOT NULL) AND (:P17_NEW_PASSWORD_2 IS NOT NULL) AND (:P17_OLD_PASSWORD IS NOT NULL) THEN
if :P17_NEW_PASSWORD_1 != :P17_NEW_PASSWORD_2 then
raise_application_error(-20300,'New passwords do not match');
end if;
execute immediate 'alter user '||user||' identified by '||:P17_NEW_PASSWORD_1||' replace '||:p17_old_password;
htp.p('Password Changed Successfully');
end if; --passwords not null
exception when others then
htp.p('Error changing password:'||sqlerrm);
null;
end;

The application parsing schema (owner) needs ALTER USER privilege. It probably works in SQL*Plus because that schema has obtained the privilege through a role.
Scott

Read this to find out how to add/update/delete users and change/reset passwords programmatically

WebLogic 7.0
I have read a number of questions on how to do these but not many answers, so
after figuring it all out, I thought I would post a message describing all these
tasts (It would be great if BEA would start something like 'HOW-TOs for Linux'
for WebLogic)
-1. Imports required :
import weblogic.jndi.Environment;
import weblogic.management.MBeanHome;
import weblogic.management.WebLogicObjectName;
import weblogic.management.configuration.DomainMBean;
import weblogic.management.configuration.SecurityConfigurationMBean;
import weblogic.management.security.RealmMBean;
import weblogic.management.security.authentication.AuthenticationProviderMBean;
import weblogic.management.security.authentication.GroupEditorMBean;
import weblogic.management.security.authentication.UserEditorMBean;
import weblogic.management.security.authentication.UserPasswordEditorMBean;
import weblogic.security.providers.authentication.*;
0. Code to retrieve DefaultAuthenticatorMBean (this code is running inside WebLogic
server - I have it inside EJB):
DefaultAuthenticatorMBean authBean;
Context ctx = new InitialContext();
MBeanHome mbeanHome = (MBeanHome) ctx.lookup(MBeanHome.ADMIN_JNDI_NAME);
//Find UserEditorMBean
DomainMBean dmb = mbeanHome.getActiveDomain();
SecurityConfigurationMBean scmb = dmb.getSecurityConfiguration();
RealmMBean rmb = scmb.findDefaultRealm();
AuthenticationProviderMBean[] providers = rmb.getAuthenticationProviders();
for (int i = 0; i < providers.length; i++) {
if (providers[i] instanceof DefaultAuthenticatorMBean) {
authBean = (DefaultAuthenticatorMBean) providers;
break;
1. Create/Drop/Update users
to perform these tasks, the user must be logged in into weblogic and be in Administrators
group. Then, the code is as follows:
create user: authBean.createUser(username, password, description);
remove user: authBean.removeUser(username);
change user's description: authBean.setUserDescription(username, newDescription);
remove user from group: authBean.removeMemberFromGroup(groupname, username);
add user to group: authBean.addMemberToGroup(groupname, username);
2. Change other users' passwords (MUST BE ADMIN TO DO THIS - by Admin I mean be
a member of Administrators group)
authBean.resetUserPassword(username, newPassword);
3. Change your own password:
this is a bit trickier, because if you are not an admin, you can't change your
own password!!!! This is a part that I personally don't understand - seems like
a screw up on BEA's part. So, to allow users to change their own passwords, you
must change security context in the middle of processing to that of Admin user
and run this function as Admin user. Although a bit ackward, it's very easy to
do. Suppose you have two EJBs - EJB A and EJB B. EJB A does normal processing
for the user and always runs in logged in user's security context. Now, suppose
you want to add a method to EJB A to change current password. The method may
look like:
public void changePassword(String logon, String oldpwd, String newpwd)
throws some exceptions
Now, there is no way to do it in EJB A, because for most users, it will run in
a 'non-admin' security context. So, to get around it, you create another
EJB - EJB B. This EJB has one method:
public void changePassword(String logon, String oldpwd, String newpwd)
throws some exceptions
and one major difference - this EJB always runs in a secrity context of admin
user. To get an EJB B running 'as admin user', all you have to do in EJB A is
the following
EJB A:
public void changePassword(String logon, String oldpwd, String newpwd)
Hashtable props = new Hashtable();
props.put(Context.SECURITY_PRINCIPAL, "wlmanager");
props.put(Context.SECURITY_CREDENTIALS, "password");
// get context that with different credentials
Context ctx = new InitialContext(props);
EJBBHome home = (EJBBHome) ctx.lookup("EJBBHome");
EJBBLocal adminEJB = home.create();
adminEJB.changePassword(logon, oldpwd, newpwd);
adminEJB.remove();
of course, this poses a problem of hardcoding user id and password for admin user
in your application - you can come up with your own ways to secure that.
THAT's IT!!! You can use the method explained in part 3 to allow non-admin users
to do pretty much everything, however for the sake of security, I would definetly
vote against it and use part 3 to ONLY allow users change their own passwords
Enjoy
Andrey

I have a similar question, I would like to edit the artwork for EACH episode in the podcast, as well as have one artwork for the entire podcast series. Any suggestions? This is a podcast that I've created -- I did the same thing for a TV Show where I was able to do custom artwork for each episode, but not one single artwork for the entire series. Does anyone have suggestions of how i should proceed?
Recap:
One image for entire Podcast Series (or TV show)
Different Set of Images for each episode in Podcast. (Understand how to do this in TV show)
Thanks!

I don't know the password for the SMTP account so as to mail photos. How can I retrieve or change the password?

I am unable to share photos from the Iphoto program because I don't know the password for the SMTP account. How can I either retrieve or change that password? Or is it one I already should know?

Have you set the general preferences in iPhoto to email using iPhoto? Then change it to email using "Mail". This way iPhoto will use your regular Mail account.

Communication user to use ITS services

Are multiple logons allowed for the communication user by SAP?

Jut what account are you talking about? You can sync an unlimited number of iDevicesthat you control to one iTunes account. However, you you can only have five computers authorized to use media purchased from one iTunes account.

My Ipod changed its password while i slept..

I woke up this morning and was going to listen to music onmy iTouch and found out that the password had been changed, and to top it alloff it also changed from a simple password to one where I have t type inletters and numbers. I tried to unlock it and I asked everyone that I knew ifthey had done it but everyone said they hadn't touched it. It was dead so Ijust charged and it says "iPod is disabled, try again in 21,763,762minutes." How can I make that go away and figure out my password? is there anyway you can reset it for me? I’d really appreciate it!

connect the iPod to its syncing computer and restore it via iTunes. If iunes asks for the passcode and you can't successfully enter the passcode, place the iPod in recovery mode and then restore the iPod for recovery mode see:
iPhone and iPod touch: Unable to update or restore
For more info see:
iPhone, iPad, iPod touch: Wrong passcode results in red disabled screen

How can my java application change unix password?

Hi all,
Is there any one knows how to change the Unix password from an application? How can i give commands to the shell?
Thanks

How can i write a progaram that takes my (old pass,new pass,confirm pass) and change the unix password

I lost my password and cannot connect, or change the password. what can i do to change my password?

I forgot my password for my airport. i need to know how to access the system and change my password

Pay close attention to the information about a "Soft Reset" in this Apple Support Document:
http://support.apple.com/kb/HT3728?viewlocale=en_US

Communication user is not requested change password

Hi
We have set a general rule, that users must change password every 90 days (login/password_expiration_time). We have now had a communication user in the system for more than 5 months, and the password is still not expired.
How can this be? Shouldn't communication users be forced to change the password?
In table USR02 I can see a field XUPWDSTATE - "Password Change Mandatory / Optional (See Domain XUPWDSTATE)", but I can't find any documentation on this field. The values are 0,1,254,255. Does anybody know what these values mean and how/when they are set.
Thank you for your help.
Regards, Morten

>
Morten Ellgaard wrote:
> Hi
>
> We have set a general rule, that users must change password every 90 days (login/password_expiration_time). We have now had a communication user in the system for more than 5 months, and the password is still not expired.
>
> How can this be? Shouldn't communication users be forced to change the password?
>
> In table USR02 I can see a field XUPWDSTATE - "Password Change Mandatory / Optional (See Domain XUPWDSTATE)", but I can't find any documentation on this field. The values are 0,1,254,255. Does anybody know what these values mean and how/when they are set.
>
> Thank you for your help.
>
> Regards, Morten
Well, that's a common misunderstanding:
accounts of type "COMMUNICATION user" are subject of password expiration - however the password change requirement is not enforced (since the server cannot interact with the user). Actually that's not mainly caused by the user type but by the communication protocol being used: RFC and HTTP allow both, interactive and non-interactive system usage. Only the DIAG protocol (used by SAPGUI) ensures that an interaction with the user is possible - and in this case the system is enforcing a password change (when required).
Note 622464 provides an overview on the user types and the ability / requirement to change passwords (and other impacts).
Side-remark: modifying the USR02 field would not have any impact on the password change handling (beside the fact that such direct table manipulations are risky and strongly discouraged).
As reported by other SDN community members (and stated in note 320991, quite at the end) there are some profile parameters that will cause RFC and HTTP based logon to fail for passwords which are expired / initial. Setting those profile parameters will result in a downwards-incompatible system behavior - for this reason the default setting is "off".
Indeed, if you intend to use "technical accounts" for (automated) system-to-system communication, then kindly use the user type "SYSTEM". In that case, the password is neither "expired" nor "initial" - no password change is required nor can it be performed by the SYSTEM user itself. Only an user administrator can set a new password (in systems as of NWAS 7.0: even a downwards-compatible one - despite the password policy, see notes referenced by note 622464).

Can Communication User Id change its password

Similar Messages

Maybe you are looking for