CustomLoginModule just bypassing password reset scenario at first logon

Hello,
We have developed a CustomLoginModule by extending AbstractLoginModule (to check userid & passwords as some custom requirements ) as shown below
public boolean login() throws LoginException{
IUserAccountFactory userAccountFactory =UMFactory.getUserAccountFactory();
IUserAccount ua=userAccountFactory.getUserAccountByLogonId(userName);
IUserAccount mutableAccount = userAccountFactory.getMutableUserAccount(ua.getUniqueID());
  if(mutableAccount.isPasswordChangeRequired())
  mutableAccount.setPasswordChangeRequired(true);
  mutableAccount.commit();
if( !ua.checkPassword(passWord) )
  throwNewLoginException("invalid password");
  try
    refreshUserInfo(userName);
    refreshUserInfo(passWord);
   } catch (SecurityException e) {
     throwUserLoginException(e);
    successful = true;
    return true;
}  //end of login() method
After adding this login module to ticket stack , It was working fine for existing portal users.
Issue is with new portal users logging in for first time, It was skipping through initial password reset scenario and giving access to the portal content
Any clues to fix this issue?  (and any UME config paramterters need to be changed)
Thanks
Madhu

What does it mean..?? I am using my own custom xsl.
Edited by: user10104431 on Jul 17, 2010 3:02 PM

Similar Messages

  • Password reset and email doesn't send email.

    I want to reset my password, so I clicked on reset password and email, and have not received an email. Now I have no idea what my password is. It's really tough to get to this page.

    I've had this problem for several weeks, now running FF 6.0.2, although I doubt the FF version has anything to do with the problem. I sent the following e-mail to [email protected] on 9/20, and have so far received no reply:
    ============
    I've been having login problems on Mozilla sites lately, apparently
    because I can't remember my username. Since I can't remember my
    username, I can't request a password reset.
    I've tried the usernames in Firefox's Saved Passwords file, but of
    course they don't work. I can't reregister because my email address is
    "already in use", undoubtedly by me. One of the Firefox sites eventually
    gets to where they claim to send me account information, but that never
    shows up, either in my Thunderbird client, or in Verizon's files --
    either mail or junk. I've tried this many times with the same result,
    Is there any way to simply delete my e-mail account from all of
    Mozilla's websites, forums, etc., and let me start over?
    ===============
    I've established a new account using a new e-mail address, so I can start using the forums again, but I would like to get back to using my "real" e-mail if possible.
    Interestingly, when I post anonymously and am asked for an e-mail to confirm my subscription to a forum, I use my "real" e-mail, and receive the confirmation request from [email protected] OK. It's just the password-reset e-mails that aren't working.

  • Unable to change password while first logon on windows server 2008 R2 SP1 system

    Hi Team,
    Ad team has created new account for me with change password on first logon setting
    When I logged in on Windows Server 2008 r2 SP1 system with my new credentials I get a error message stating that
    "You must change your password before logging on the first time. For assistance, conatct your system administrator or technical support" 
    Concern:
    I do not get password change screen on first logon on the server. How should I change my password on first logon?

    Hi,
    I got resolution for above issue
    Run ==> type "tsconfig.msc" ==> double click "RDP-TCP" ==> change security layer to
    RDP Security layer ==> Apply ==> OK

  • I just started my Macbook air the first time, connected it with my wlan and know it asks me for a password and it does not accept the only password I know, what can I do?

    I just started my Macbook air the first time, connected it with my wlan and know it asks me for a password and it does not accept the only password I know, what can I do?

    It needs the user password for the wireless router, that would have been set by whomever installed the router, if that was you then try to find the password. If you can not find the password reset the router to factory default and set it up again.

  • New users with Global Password Policy requiring password "reset on first user login" are still prompted to reset password after entering incorrect password

    The setup:
    We have the option "Password must: be reset on first user login" enabled in the Global Password Policy on our 10.9 / Mavericks server. We import new user accounts into Open Directory via a delimited text file and include a default password for each user.
    What I've observed and tested:
    When a user attempts to log into a computer that's bound to our Open Directory for the first time, they can enter anything in the password field and still receive the prompt to reset their password. They are never notified that they entered their default password incorrectly. The password reset will then fail (as it should), but they still aren't notified that this is the reason for the password reset failure. To put it another way: Seeing the prompt to reset your password would reasonably imply that you entered the default password correctly, but that's not the case at all.
    The question:
    Is this expected behavior? If it is, it doesn't seem logical. If this was the case in OS X Server 10.3 through 10.7 I never noticed it. Can anyone corroborate this with their own setup? Thanks in advance.
    -- Steve

    Some follow up questions:
    - How did you migrate (dsmig ldif or binary import)
    - Did the accounts in .x have any custom password policies set?
    For a "new" and a migrated entry, can you check if a passwordpolicysubentry is configured?
    (search as directory manager and fetch the attribute)

  • Then they reset evermy ipod out of nowhere he erased all the songs and ything as if I had just purchased apps, photos, notes, everything I just delete and not q passes first erased all the songs and then complete a reset what happened?

    my ipod out of nowhere he erased all the songs and then they reset everything as if I had just purchased apps, photos, notes, erase everything and I just do not know what happens first erased all the songs and then complete a reset step? and

    Glitches happen sometimes. Just restore from backup
    To restore from backup see:
    iOS: How to back up
    If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
    You can redownload iTunes purchases by:
    Downloading past purchases from the App Store, iBookstore, and iTunes Store

  • Apple ID not found. I know it exists because last password reset was on 3/2012. Did Apple delete my Apple ID?

    So first I was having trouble resetting my Apple ID password. Now I think it may have been deleted. e
    I automatically got signed out of Game Center and Find My Friends for which I use a different Apple ID account for. I think this happened after I upgraded to iOS 6 but not sure. I've tried to reset the password on http://appeid.apple.com using the two options.
    Option 1) I don't get the email verification in my inbox (looked everywhere, even spam folder. I even added the [email protected] address to my contacts to make sure it wasn't being sent to a spam box, etc.).
    Option 2) I enter my birthday but I get a message that it doesn't match with the records.
    So then I went through the steps to find my Apple ID if it existed and what do you know, it says "No Apple ID found".
    Could my Apple ID have been deleted? I thought Apple ID's "could not be deleted"? I know this Apple ID does exist (or did?) because my last password reset was in March 2012. I still have the old emails to prove it. I'll be so annoyed if it got deleted and all my Game Center stats are erased. (I got 11,600,000 in Temple Run!)
    Other information:
    I do have another Apple ID account which I use as my main account for purchases. For the rescue email and an alternate email address for this account, I use the email which is also the username of the other Apple ID account I am questioning about. I'm not sure if this has anything to do with it but just thought I'd put it out there in case it is.
    Has this happened to anyone else? 2     
    I swear, this whole Apple ID nonsense started for me when trying to set up Facetime across devices on my macbook and ipad and had to make new apple ids. So confusing. Anyway, thanks in advance for any insight into this dilemma.

    I'm having the same problem, what did you do?

  • Has anyone else had a problem with receiving password reset authenticate emails to the email its supposed to go to but doesn't??

    I cant sign on to my main Itunes account so i try to authenticate by security question but its not a familiar one, its one that i have never used on anything but i go along and try every birthday in my huge family and nadda...so i try to go the way of the email authentication,this is where it gets a little more interesting...I send it off and it says ok go get it and i go and look and nothing. now i try this several different times and same thing but i have a reciept from 11/11/11 for music i purchased just 3 days earlier, but now its not working, so i try to get a reset on another account, another email address, still connected but not used and i send off the authentication and SLA-BAM...its right there in a spilt second. so whats the problem. I'm no expert, but theres something rotten in Denmark! I only got to get to where i actually got an email off to costumer support and that was a maze of redirects that really just confused the issue, AOL costumers call ! 800 BLAH BLAH to have the AOL overseas operator tell me I am an IDIOT for thinking AOL and ITUNES where in anyway connected likethat and i would have to contact Itunes support....I DID....THAT WHO TLD ME TO CALL YOU!!! Am i missing something...you cant make the best stuff in life up...the real shut is the funniest....I am sitting here just shaking my head...luckily I'm well balanced and basically a Whatever type but its baffling to me how some things can get so confusing by trying to make it user friendly. just have an american person at the end of a small pay line at the worst to talk to a living breathing being, instead of a computer that doesn't give you an option to just bypass and go to a person,no you have to try to reason with the machine to get what you want...lol i need some decaf, thanks A S C for a forum to vent, Keep Fighting The Good Fight! Cya

    If you aren't receiving password reset emails and your security questions don't work, someone has hijacked your account.
    This happened to me.
    You need to use Expresslane to contact iTunes support to regain access to your account ASAP.

  • Sent My Laptop in for Repairs and got my Password Reset but don't know what it is

    So, I had to have my laptop sent in to a locale (well, about 100 miles away) repair shop, and they seemed to of reset my profile password, and I have no idea what it is. I've tried e-mailing them, but they aren't replying. Calling them would be pointless because they are Middle Eastern and can not be understood. I'd hate to have to go back all the way to the store and try to understand what the heck they are saying when there is an easier way to get this fixed up.
    EDIT: This is not the BIOS password, it's the password to my profile on my laptop. It's the only profile on my laptop, but it's not the Admin account for some reason, there is no Admin account, and I have no idea why. I tried using ophcrack with no luck.
    I even bought Windows Password Key, but when I try it, it starts the program, then the laptop just restarts by itself. Security measure, perhaps?

    simplest..... google for "linux boot windows password reset" ... take the first link to howtogeek.com ... it has a disc image and instructions on resetting a windows password.
    http://www.howtogeek.com/howto/windows-vista/change-your-forgotten-windows-password-with-the-linux-s...

  • Can't login to Mac OS X server website after password reset

    Hi,
    I set up Mac OS X server for our small company and tried resetting the password of my network account that is managed via profile manager.
    So, under Accounts->User->MYUSERNAME->reset Password, I typed in a new one and hit ok.
    Now I can't login to the server website anymore (for editing our wiki or using profile manager etc.), neither with the new one nor with the old one.
    I already tried different passwords (resetting it again and again), I looked at the password directive, I checked my user name, tried to login from different computers and tried logging in with another account (which worked quite fine, so it's just my account). Finally I searched the internet for a solution for quite some time but didn't find anything similar.
    It would be great, if somebody could offer some advice.
    Best regards.
    Lasse

    Solved it by deleting the user and creating a new one with the same userID.
    Maybe it occured because I marked the "user has to change password after first login" box when resetting the password but didn't yet allow him to do so in the webpages menu?!?

  • Portal Password Reset problem

    Hi All,
    My scenario wants an automated process where the users can reset their own password. Do you know if the user password reset on the logon page is a automated process? Does the email with password go directly to the user or the email goes to the administrator and then the administrator has to reset the password? Do I need to configure the SMTP in my client system for this? If so can you give the steps involved for configuring SMTP?
    I have configured SMTP server by logging as Administrator in portal -> System Admin -> Sys Confgiruation ->
    Universal Worlist & Workflow -> Engine and gave the notification email as 'JavaMail'.
    The again portal -> System Admin -> Sys Confgiruation ->
    Universal Worlist & Workflow -> Email edit it gave the Host name as my SMTP mail server name. I checked my mail server through telner <mail server> 25 and it is opening in command prompt. Am I missing anything here in SMTP configuaration. Fileds like Pop3 User and Pop3 Password I wanted to leave as blank but when I click save in Portal , it self add some encrypted values.
    can Anybody has done the above scenario.Its urgent.
    I have read on help.sap.com and it looks like it sends an email to administrator and then the administrator resets the user password. Is my understanding correct on the above.
    Can anyone provide me a step by step approach on the same.
    Suitable answers will be rewarded definitely.
    Regards,
    Narayanan B

    I found some information about this on SDN and on the help.sap.com site that might help:
    First look at:
    Change/Reset password option on the login page
    and:
    Password Reset
    Then check here:
    http://help.sap.com/saphelp_nw04/helpdata/en/52/4c6c3e58d0d064e10000000a114084/frameset.htm
    and look at the description for: <b>ume.logon.logon_help</b>

  • Password reset option in Portal

    Hi Experts,
    I would like to integrate password reset option in between help and logout option in masthead.
    The issue is:
    1.how to integrate a link in Masthead which on clicking enables end user to reset Password?
    2.is there any coding that i have to do for password reset?
    Thanks Inadvance!
    regards,
    Siva

    Dear Siva,
    I will try to address your questions as best as I can.
    But what you're asking is too much I'm afraid.
    It seems you're needing to learn the basic concepts of Portal development first.
    And explaining all those concepts on a forum post is simple impossible.
    Moreover, the component you're trying to develop is not an easy one to start with.
    My advise to you is to first read some manuals or attend a few SAP training sessions on the
    subjects:
    - JAVA development
    - JSP development
    - Developing Portal components
    Nevertheless, and trying to answer your questions as best as possible, here's some tips that I
    hope can guide you the right direction (and again, if you don't have the basics, you
    might not understand part of it):
    I have been through above wiki, its not indetail.
    Yes It is.
    The wiki shows you just what you need - the code.
    It is not a "how-to" develop a portal component. It assumes you know that already.
    I could not understand where to start from?
    You need to develop a Portal Component on your NWDS (Netweaver Developer Studio).
    On you NWDS go to
    File > New > Project.
    And inside that box, choose: Create a Portal Application Project.
    Now you need to create the Portal Component.
    Go with your left mouse button on the project you have just created and choose
    New > Other > Portal Application > Create a new Portal Application Object
    I would suggest JSPDynPage (here you can choose to create a JSP, Bean and a Java main class)
    Where do we find the 1. portalapp.xml, 2. Implement the Bean, 3. PasswordChange.java, 4. PasswordChange.jsp, 5. Success.jsp, 6. Redirection.java?
    You need to create all those JAVA and JSP objects yourself.
    The bean is a JAVA class that you need to create as well.
    The portalapp.xml is a file that is automatically created by the NWDS when you create a Portal Project.
    Provides configuration information for your application - it is like a "business card" of the application itself.
    And that "business card" will be presented to the Portal when deployed - saying "hello, I'm a Portal application
    and this is what I have inside".
    You can learn more about this XML file here:
    [http://help.sap.com/saphelp_nw04/helpdata/en/44/489e2df5ee4e35e10000000a1553f6/frameset.htm]
    Hope this helps you.
    Good Luck!
    /Ricardo Quintas

  • Password hint required in password reset through console

    We are using OID to handle our user database. One of the problems we are having is that the forgot password feature through the Oracle Identity Management Provisioning Console doesn't really enforce required fields for password reset. I currently have the orclpasswordhint and orclpasswordhintanswer attributes with the following settings: required, viewable, self-editable, and Password Reset Validation. The problem is that if someone has never set their password hint and answer, it will not ask for them on password reset and will just ask for their email address. While we could probably control this from within the application hooking into OID, we want to be able to force the user to enter this data or be unable to use the console to reset their password.

    Hi Jay,
    i follwed your steps i am getting the below error when i am trying to start manageservers with nodemangers.
    <Dec 14, 2010 4:02:47 AM EST> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
    weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
         at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(Unknown Source)
         at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(Unknown Source)
         at weblogic.security.service.SecurityServiceManager.initialize(Unknown Source)
         at weblogic.security.SecurityService.start(SecurityService.java:141)
         at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
         Truncated. see log file for complete stacktrace
    >
    <Dec 14, 2010 4:02:47 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>
    I tried with deleting ldap folder also.
    Regards
    Madhu

  • Need remote lock and password reset

    This question is in regards to this thread:
    https://social.technet.microsoft.com/Forums/windows/en-US/499f83d0-36f8-4f29-a4ce-e32f76632c90/intunesccm-mobile-application-management?forum=microsoftintuneprod
    -We currently have ConfigMgr 2012 R2 and want to start using Intune to support company owned iOS devices.
    -We must have the ability to perform remote lock and password reset on our iOS devices.
    -According to this link  https://technet.microsoft.com/en-us/library/dn600286.aspx this is not possible with ConfigMgr integration.  So I assume this means I
    should NOT integrate Intune with our ConfigMgr right now, correct?  And according to the response referenced above, Microsoft plans on erasing this disparity in the future, so I guess I should just wait until then and use Intune standalone until
    then? correct? But at some point it should be safe to do so, correct?
    While I am not in this position, it appears that when you are setting up Intune with ConfigMgr you get to a point of no return where you "Set the Mobile Device Management Authority" and the prompt says this is permanent.  For those that
    have integrated ConfigMgr, does that mean they are stuck and have no option to change to using Intune only to get these features?
    I setup ADFS/WAProxy for SSO for Intune.  I can still use that without ConfigMgr integration right?
    On a different note, is the on-premises connector for Exchange a requirement for Intune?  I have seen several tutorial for installing Intune that do not mention this step.
    https://technet.microsoft.com/en-us/library/eb9618d2-dc90-48be-b921-8044b7e693ac#bkmk_EX_OP

    Hi,
    I guess the first question is really up to your company requirements and how long you can wait. as there are now communicated time of release of that feature it is hard to say if it is worth it.
    Exchange connector in SCCM 2012, no, Exchnage on premise connector for Conditional Access in Intune, if you want to use that feature yes you need it but you can use Intune without it.
    Yes, you can use ADFS/WAP for Intune standalone as well.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Unable to see the "Password Reset" tab in Indentity Store (SAP IDM 7.1)

    I am trying to implement Password self-service as per the document "SAP NewWeaver Idenitty Management Identity Center Self-service password reset Implementation Guide" Version 7.1 Rev 2. In this guide, references are made to the Password Reset Tab in the Identity Store properties view in Identity Center. I do not see that tab in my view.
    I followed the standard inst guides during the upgrade. Its a fresh implementation and we are on IDM 7.1 SP5
    I have checked out couple of similar posts where it was resolved by installing SP3/4, does anyone have any other solution than applying the SP again ??
    What do I need to do to have that tab?
    Thanks

    Matt,
    Ours is a fresh installation
    According to the PSS 7.1 V2 guide, i completed the section 1 where i creted the UME roles and the
    Section 1: Creating the tasks
    Creating the folder for the tasks
    Creating the password reset task
    Creating the password reset failed task
    Then started the Section 2 Configuring the identity store and the first point the document says is "Select the identity store in the console tree and choose the "Password reset" tab: " which i am unable to see the tab in my system.
    I am i missing some config steps here ?  again i am just goin line - by - line what the doc says
    Thanks
    Edited by: Chetan on May 23, 2011 4:43 PM

Maybe you are looking for