Change passwords after using LDAP authentification

It seeems that we have successfully set up a Portal server using external authentication. But somehow, no one can change his/her own passwords after logging into Portal. The error message is "the user does not have the privilege to perform this operation. (WWC-41661)". Is there any special setting needed to be done on LDAP for this?
Thank you for any advice.
Zhuang Li

Hi,
We upgraded our company email server, which effectively runs our email, DNS, Open Directory with dozen users. Last night the system was upgrading from 10.10.2 to 10.10.3, which seemed rutine.
The upgrade process hung while it was finishing the installation and didn’t finish. Upon reboot, it looked OK and needed to upgrade the OXS Server to 4.1 from the previous version. Which I proceeded and completed.
Since then we have lost all of our users accounts and can’t access the email data. Tried to reboot from the backups and it seems that the somehow when booting from external backups 10.10.2, we get a message that the OXS Server is not compatible. Our backups are usually done using Carbon Copy Cloner.
Not sure what to do, help is greatly appreciated. While I can recreate the users, I don’t want to damage the email data.
Many thanks,
/Oliver

Similar Messages

Create a user through the API and "Prompt user to change password after next login".

Using the Adobe Connect Interface, I can create a user and check the checkbox to "Prompt user to change password after next login".
Can I achieve the same result using the API? The principal-update action doesn't offer such an option and, as far as I can tell, there isn't another action to do so either.
Thank you.

You can achieve it as part of your application functionality, but not as a configuration option on WLS.

User must change password after reset?

I am looking at the password policy settings and am wondering what "User must change password after reset� actually does. I turned it on. I tried changing some passwords in an ldap client and didnt get any messages or errors after authn again. And I didnt see a special attribute in the persons entry. Any clues?

When the flag is enabled and the password is changed by "cn=directory manager", the next time the user authenticate, the server returns the Password Expired Control (with a Success code) and all requests other than modify of userPassword are rejected.

User change password after first logging in Oracle 11g

Hi
Can you help someone in connection with this problem:
user can not change password after first logging in Oracle 11g
All the best
Ragip Avdijaj

Sounds like they are not getting logged in at all, so they are never getting to the point where they can change the password, but we need to see more detail to give a better answer (an example or copy-paste of a sqlplus session might help)

How to change password programaticaly in LDAP server

Hi
Can anyone give suggestion how to change the password programatically in the
LDAP server using JNDI.
Thanks

You'll likely need to see what programmatic interfaces your LDAP provider
offers. You can use that to make invocations to change your user passwords.
Michael Girdley
BEA Systems
Learning WebLogic? http://learnweblogic.com
Buy the only book covering J2EE & WebLogic 6:
http://www.amazon.com/exec/obidos/ASIN/0130911119/learnweblogic/103-9227026-
4636613
"Suresh Done" <[email protected]> wrote in message
news:3b732f57$[email protected]..
Hi
Can anyone give suggestion how to change the password programatically inthe
LDAP server using JNDI.
Thanks

I cannot log into user account with old password after using migration assistant.

I used Migration Assistant to move only my Settings and Users from my Power PC (User name RLE 5) to my Mac Pro. Because of what I have read in these forums I did not migrate applications or and files/folders. I will do that manually. After migrating I tried logging in to my user account RLE 5 on my Mac Pro, but it is telling me I am using the wrong password. I used the same password I used on my Power PC, but with no luck. On my Mac Pro I went into System Preferences>Accounts>RLE 5 account and changed the password. I then rebooted and tried again. No luck.
Can somebody help me with this problem?
Thank you.

What you propose would not solve the problem I am having. I must not have been clear about it. So I will elaborate.
I have a Power PC with 10.5.8. The admin user account name is RLE 5. I need a password to log into my root user account on my Power PC.
Then I bought a used Mac Pro with a clean install of 10.7.5 and no password set up yet for my admin user account. The admin user account name is Mac Pro. When I turn on the computer it opens to my admin user account where I have access to everything.
I used Migrations Assistant to move my Settings and Users from my Power PC to my Mac Pro. That seemed to to successfully.
So I now have four users on my Mac Pro: RLE 5 (the admin user from my Power PC with the password), Mac Pro (my admin user which does not require a password), and two guest user accounts.
I turn on my Mac Pro and it opens to my Mac Pro admin user account. I don't need to sign in. No problem.
I log out of Mac Pro. On my screen are the four user accounts. I click on RLE 5 (which was my admin user account on my Power PC that I migrated over to my Mac Pro) to log into that account and it asks me for a password. I type in the password I used for my Power PC. It keeps telling me it is the incorrect password.
I cannot log into my user account RLE 5 on the Mac Pro. I am being told I have the incorrect password. I've gone to System Preferences>Accounts and changed the password. It doesn't make a difference.
Also I cannot log into the Guest User account that migrated from the Power PC to the Mac Pro for the same reason. I have also tried to change the password for that Guest User account also but with no luck.
Another interesting thing has happened. I decided to give my Mac Pro admin user account a password by going to System Preferences>Accounts. But when I do a test to sign into my admin user account Mac Pro it tells me it is the wrong password. Luckily I can reboot the computer and it opens to my Mac Pro user without asking for a password. But if I log out of Mac Pro and try to then sign back in with the password it tells me it is the incorrect password.
Any suggestions would be appreciated.

Changing password after adding new employee

Setup: DB2 z/os database authentication, Propagate Change parameter set to TRUE.
Created a new employee using sadmin account with the fellowing detail:
Last Name: empl, First Name: emp1002, User ID: emp1002, Responsibility: CG Retail Sales Representative, Position: Proxy Employee, New Responsibility: CG Retail Sales REpresentative
Created cooresponding DB user account on DB2 z and password: EMPL.
Then login to emp1002 using IE.
The signon screen is Password, and has three fields: Current Password, New Password, Verify New Password. However, when I enter new password and press Save, the new password will not be saved.
Also, try to change password following Tools -> User Preferences -> User Profile.
However, the password field is gray out and the Contact information still show as Sadmin.
Please help.
Joey

Hi Joey,
By default the new password field under user preferences screen remains read only.You can make it editable by following below steps :-
1) Go to Admin->Server Configuration->Enterprises->Profile Configuration view.
2) If you are not using any 3rd party security adapter like LDAP or ADSI then query in field "Alias" by "DBSecAdpt",if yes then search for corresponding adapters.
3) In the 3rd applet "Profile Parameters" under field "Name" search for "Propagate Change".For this particular record change the value under field "Value" to "True".
4) Bounce siebel server.
5) Now check under user preferences->profile.
-Sambit

Can I stop having to change password after one wrong entry?

It seems the requirement to change password for apple id is now 1 failed attempt..instead of being able to recover and use same password after answering security questions, I have to change passwords...this has become a pain. Can this be changed?

I just made to bad attempts at entering my password into the iTunes Store and got the request to update my password before proceeding. I clicked through the links for Apple to send me an email (vice using the security questions). I ignored the email and entered my correct password and downloaded the music I wanted. You do not actually have to change your password, just go through some of the motions to initiate the process and then you can stop.

Linux and Solaris Clients with password policy using LDAP

Anybody managed to get Linux (RHEL) and Solaris 9 Client authenticate against Sun Directory Server 5.2p4 using the same password policy?
For me it looks like Linux needs attribute shadowlastchanged set to display proper Warnings, that the password will expire/needs to be changed now. On the other hand Solaris (using pam_ldap) never writes this attribute, because it's using the password policy attribute pwdchangedtime.
Hints very wellcome!
Can anybody confirm Solaris9 pam_unix still sets this shadow* attributes correct on any password change executed by a user?

Hi Jeremy,
here the answers to your questions:
>My question is which system takes precedence over the password policy?
Unfortunately there is no policy verification between the portal and your Sun One LDAP. So if you reset the password from the portal then only the portal password policies can be checked.
> If I wanted to do password resets from the Portal, does the portal then store only the password in its database?
No, the password will be stored in the LDAP, but only if it also corresponds with the LDAP policies. If not, then you will get an error, but you will not see the real LDAP exception.
> Also what would then happen if you tried to reset the password from the LDAP?
The password in the LDAP does not have to fit to the Portal password policies. When you log in, the portal will only check if the password you tipped in is the new one in LDAP and will not check any policies.
Hope this brings some light in,
Robert

Can't change Password after hack-in on IPHone, others work?

Ok, so I'm on vacation last week, and on Thursday I can't get in to get my email on my Iphone. Get home, get on yahoo and find an email sent from Yahoo to my email, saying I had been hacked and so I guess they cancelled my password. Why send the email to something I can't get to with it? Anyway, I change password, and said pw workd on IMac, laptop and IPad....but it won't work on the IPhone. A message comes up that says "Yahoo Server Unavailable. Please try again later." I've done it about 10 times now in the past 5 days and get the same thing. I also note that I go to save the new password, but it doesn't save it, it reverts to the old one in •••••••• s .Is there something wrong with Yahoo/sbc email going to the IPhones or does it mean something else. thanks. I really need the IPhone to receive emails when I'm not home.

Yahoo has hundreds of servers for authentication. They are notoriously bad about synchronizing with each other.
You may need to try to add the account multiple times. You may just have to wait it out. This is a problem with Yahoo, not with your phone. One of the reasons I dumped Yahoo and switched to gmail years ago.

Open Directory users prompted to change password after 10.8 to 10.9 server upgrade

I just upgraded our 10.8.5 server to 10.9.3. I also upgraded Server.app to the most recent version (3.1.2). I made a complete backup first as a precaution.
Existing non-admin users are being prompted to change their password when logging in. I've narrowed the problem down to a checkbox in the "Global Password Policy" settings in Server.app, specifically this checkbox: "Passwords must: be reset on first user login". I had that box checked in 10.8 so that new users would be prompted to create a password the first time they logged into a bound computer. It worked great and I'd like to continue using this feature in 10.9.
If I uncheck this box in Server.app in 10.9.3, existing users can log in just fine with their existing passwords. If I re-check the box, non-admin users are suddenly prompted to change their password when logging in, even though they've logged in countless times in the past.
Here are some things I've tried:
* stopping and restarting the Open Directory service in Server.app
* restarting the server
* disabling and re-enabling an existing user account
* inspecting user records in Directory Utility for any peculiar attributes
* I used the mkpassdb -dump command to verify that the correct "last login time" is present for a particular user, but I'm not enough of an Open Directory expert to know if this is the attribute that the Global Password Policy relies on.
Does anyone have any other ideas or suggestions?

UPDATE: It looks like this issue applies to new (post-upgrade) accounts, too, suggesting that this has nothing to do with the upgrade process. Can anyone confirm this behavior? It's easy to test:
1) Make sure the "Passwords must: be reset on first user login" box is unchecked.
2) Create a new user in Open Directory.
3) Log in once. No problem.
4) Now check the "Passwords must: be reset on first user login" box.
5) Try to log in again. Were you prompted to change your password? Logically, you shouldn't have been prompted, but users on my server are being prompted.

Error while changing password after Forgot password

I have integrated OAM and OAAM in my environment. This issue occurs while accessing a protected resource.
After clicking on forgot password and correctly answering the challenge questions, when I change the password, it shows me an error message: "There is a technical error processing your request"
Here is the em console log:
Reauth failed. authUser=VCryptAuthUser{loginId='user1', bharosaUserId='103', customerGroupId='Default', customerId='32_79fc2a666c32eb4cf1e645777821153d8b5d93a308e4275e351408e3f264f0c1', fullName='null', roles=null, securityPreferences={localeCountry=, status=2, imagePath=$base\keypad\200207091-001.jpg, personalNote=persuasive double, passwordUpdateTime=1358142920306, userType=1, isLocked=false, imageStatus=2, phraseStatus=2, secondFactor=0, passwordStatus=1, localeLanguage=en, email=null, isPinEnabled=false, pinUpdateTime=1358142920306, questionStatus=2, localeVariant=, authType=2, authMode=0, pinStatus=1}}, result=authReult=2, authErrorString=null
I am working on 11gR2
Any pointer would be appreciated.
Thanks,
Subin

Were you able to resolve this? I'm seeing the same issue with the same logs.

HT204053 HOW TO ACTIVATE ICLOUD LOCK WITH CHANGED PASSWORD AFTER RECOVERY

i have lost my iphone5 9 moths ago. recently i find my ihone5 but it is stucked in icloud lock mood. now a days i use that same icloud account for another iphone4s and i have changed the icloud password. i have changed the icloud password 2 month ago. i have also lost access in my hotmail account. in this case can i activate my iphone5 with current password or i have to get access to my email adddress. or what can i do now?

Welcome to the Apple Community.
In order to change your Apple ID or password for your iCloud account on your iOS device, you need to delete the account from your iOS device first, then add it back using your updated details. (Settings > iCloud, scroll down and hit "Delete Account")
Providing you are simply updating your existing details and not changing to another account, when you delete your account, all the data that is synced with iCloud will also be deleted from the device (but not from iCloud), but will be synced back to your device when you login again.
In order to change your Apple ID or password for your iCloud account on your computer, you need to sign out of the account from your computer first, then sign back in using your updated details. (System Preferences > iCloud, click the sign out button)
In order to change your Apple ID or password for your iTunes account on your iOS device, you need to sign out from your iOS device first, then sign back in using your updated details. (Settings > iTunes & App store, scroll down and tap your ID)
If you are using iMessages or FaceTime, you will also need to log out and into your ID there too.

HT4061 uploaded latest upgrade for I phone 5 and I am unable to access my phone ás upgrade hás changed password after trying to access phone with original password numerous time it hás disabled my phone

After upgrading my phone with the latest upgrade, i have entered my old pasword and my phone doesnt recognise it. I have tred numerous times and bêen denied access. My phone hás beên díabled. After re-booting it I get 1 shot then it disables it again. what can i do now???

AllanQuatermain wrote:
Just for the record, and I dont think its going off-topic on this thread, McAfee seems ok on my newish laptop on Windows 7 ATM.
The desktop, and older PC running XP seems to have a new lease of life after installing MSE. Faster boot up; much less resources in use etc, all the points that Potters and others have mentioned on the forum about MSE. Running Malware, Super Anti Spyware in conjunction with it.
Exactly my experience. I've said before that McAfee was tolerable on my reasonably powerful laptop, but it absolutely throttled the (upgraded) netbook rendering it unusable for up to 10 mins after boot and when it scanned. I was so impressed with the change that MSE brought to the netbook that I went for it on both computers and have not regretted it for a moment.
You can click the white star next to this message if you think it was helpful.

Screen resolution does not change back after using a projector

Hi!
My office uses several different models of macbooks, but there is a small problem with all the Airs. When I have been using them with a projector I have to change back the screen resolution manually (go to the system settings and change resolution). On the macbook pros, however, the desktop restores themselves as soon as the projector is disconnected. It seems to me that this should be the standard behaviour of all macs, does anyone know why it is not working on the Airs?
Best regards
Erik

Hi Erik,
I had this problem on a MacBook and resolved it by recreating some plist files.
~/Library/Preferences/ByHost/com.apple.windowserver.xxxxxxxxxxxx.plist
~/Library/Preferences/ByHost/com.apple.preference.displays.xxxxxxxxx.plist
The xxxx's are your machine's EthernetID (MAC Address). I wouldn't delete, rather just move them to your Desktop and restart the computer. See if that resolves it.

Change passwords after using LDAP authentification

Similar Messages

Maybe you are looking for