Unable to set Password Policy controls

When I call oracle.ldap.util.User.autheticateUser() I receive the exception "Unable to set Password Policy controls". What is the cause of this error? I was not able to find anything useful through google searches.
I am running everything inside ServiceMix. Furthermore, I am able to create a context and retrieve properties through oracle.ldap.util.User.getProperties().
Here is the stack trace:
my.company.Exception.AuthenticationException: Unable to set Password Policy controls
at my.company.OracleLdap.authenticateClient(OracleLdap.java:171)
at service.AuthenticationInInterceptor.isAuthenticated(AuthenticationInInterceptor.java:55)
at service.AuthenticationInInterceptor.handleMessage(AuthenticationInInterceptor.java:32)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:243)
at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:111)
at org.apache.cxf.transport.http_osgi.OsgiDestination.doMessage(OsgiDestination.java:80)
at org.apache.cxf.transport.http_osgi.OsgiServletController.invokeDestination(OsgiServletController.java:321)
at org.apache.cxf.transport.http_osgi.OsgiServletController.invoke(OsgiServletController.java:107)
at org.apache.cxf.transport.http_osgi.OsgiServlet.invoke(OsgiServlet.java:53)
at org.apache.cxf.transport.http_osgi.SpringOsgiServlet.invoke(SpringOsgiServlet.java:48)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:179)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:103)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:713)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:159)
at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)
at org.ops4j.pax.web.service.jetty.internal.HttpServiceServletHandler.handle(HttpServiceServletHandler.java:64)
at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
at org.ops4j.pax.web.service.jetty.internal.HttpServiceContext.handle(HttpServiceContext.java:111)
at org.ops4j.pax.web.service.jetty.internal.JettyServerHandlerCollection.handle(JettyServerHandlerCollection.java:68)
at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:326)
at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)
at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)
at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
Caused by: oracle.ldap.util.UtilException: Unable to set Password Policy controls
at oracle.ldap.util.User.authenticateUser(User.java:1243)
at my.company.OracleLdap.authenticateClient(OracleLdap.java:158)
... 29 more
Edited by: user1094798 on Feb 22, 2011 12:53 PM
Edited by: user1094798 on Feb 22, 2011 12:55 PM
Edited by: user1094798 on Feb 22, 2011 1:17 PM

I fixed it by changing the way my InitialDirContext is created.
Previously I was using:
InitialDirContext ctx = oracle.ldap.util.jndi.ConnectionUtil.getDefaultDirCtx(hostname, portNum, adminName, adminPass);
Now I'm using:
Hashtable env = new HashTable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://" + hostname + ":" + portNum);
env.put(Context.SECURITY_PRINCIPAL, adminName);
env.put(Context.SECURITY_CREDENTIALS, adminPass);
InitialDirContext ctx = new InitialDirContext(env);
Edited by: user1094798 on Feb 23, 2011 8:29 AM

Similar Messages

How to set password policy for apps users

Hi All,
Can anyone please help me.
I am working on apps 11i.
How to set password policy for users
Thanks

Check Note: 189367.1 - Best Practices for Securing the E-Business Suite
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=189367.1

Power Policy Mananger unable to set global policy - error message

As my laptop hibernates after 30 minutes being unattended I would like to adjust the power settings. However I get a message saying "Power Policy Mananger unable to set global policy" - access is denied. Any ideas how I overcome this ?

hi found this on a forum hope it helps
I had a situation on machine where the administrator could not change
display settings, e.g., monitor blanking timeout period. After making
any changes and trying to save them a "Power Policy Manager unable to
set global policy" message box reported "Access is Denied".
I eventually solved this by exporting
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion
\ControlsFolder\PowerCfg\GlobalPowerPolicy
from a working machine, and importing it into the problem machine.
If that fails log on to the computer by using an account that has Administrator privileges, or make a new user and give them administrator privileges and try again with the new user account
Message was edited by: bigmac

Set Password Policy For System Administrator Account in UCCE Servers

Hi All,
We want to setup a password policy ( expires in 30 days) for the local administrator account in all our UCCE servers.
We found that the all the UCCE services are running in local system account except logger and distributor( these services are running in domain user account).
Is it a supported configuration ? Are there any impacts with this setting ?
Thanks a lot in advance!
Thanks and Regards,
Thammaya

Hi,
what is the UCCE (~ ICM) version? Is there OS hardening applied?
By the way, yes, if you mean the local "administrator" account, you can do whatever you want to do with it, provided you don't lock yourself out - this should not happen, naturally, having all ICM servers in the domain and you can always use the domain admin (or a user belonging to the domain admins group).
By the way, I don't really see the meaning of having a local administrator account being enabled. :-)
G.

Setting Password Policy in Oracle 10g

Hi,
Could you guide me please? Up to date there has not been a Policy for passwords in our 10g Database which means the user can set anything for their password. We however now require to implement a Password Policy and would appreciate some guidance in doing this.
We don't use Enterprise Manager,we have chosen not to configure it on our system.
These are the steps I propose to take to set the password policy:
1. Edit $ORACLE_HOME/rdbms/admin/utlpwdmg.sql to change default profile values to desired values.
2. as SYS run utlpwdmg.sql
Is this correct? Is there anything else I should do?
thank you.

user8869798 wrote:
Hi,
I had a look at dba_profiles:
DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD NULL
This suggests that the default profile is not using the function. It doesn't "suggest" it. That's exactly what it means. The default profile is not using a password verify function.
In the light of this, is it safe then to edit the function and the default profile will be unaffected? The profile cannot be affected by a change to a function that it does not reference.
I don't want to change the default profile. I plan to create another profile that will make use of the function and then apply it for the users
thanksthen proceed to do so. Why would you not want the function to be 'default' -- referenced by the default profile?
BTW, you can name that function anything you want. When you assign a password complexity function to a profile, you assign it by the name of the function. So you are not limited to the name used by the 'out of the box' script provided by oracle. You might want to name your own function something like MYCORP_PSWD_POLICY. And of course the name of the sql file where you keep the code can also be named anything you like, so you might want to name it accordingly. Just so you have a clear seperateion between your company's stuff and that provided by Oracle.

Unable to set password - airport utility crashes!

Hi All,
I just got a new Airport Extreme and installed the Airport Utility from the Cd (v5.5) on Snow Leopard (upgrade from the latest OS.
When I try to set the AP using the Assist Me mode - it refuses to pass the setting password (and I have only WPA2 and unsecured - which is also odd), with an alert box "a wireless network is required to continue"
So - I switch to manual mode - and select he Airport button from the toolbar (where there are also Internet, Printers, etc). Then I select the Wireless Tab (the third tab from the left).
In this tab window, there is the text "More Options" and a drop menu button, when click it there is one menu option "wireless network options" , when I choose this menu item, the utility always crashes.
===
Any ideas how set a password (WPA, WPA2, WEP), or mac filtering?
Thank you ,
Omer.

I fixed it by changing the way my InitialDirContext is created.
Previously I was using:
InitialDirContext ctx = oracle.ldap.util.jndi.ConnectionUtil.getDefaultDirCtx(hostname, portNum, adminName, adminPass);
Now I'm using:
Hashtable env = new HashTable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://" + hostname + ":" + portNum);
env.put(Context.SECURITY_PRINCIPAL, adminName);
env.put(Context.SECURITY_CREDENTIALS, adminPass);
InitialDirContext ctx = new InitialDirContext(env);
Edited by: user1094798 on Feb 23, 2011 8:29 AM

Set password policy using iPlanet SDK

I know there'a a few such post lying around and iPlanet has a few documentations, but I still can't find what I need.
Specifically, I need to use the SDK for Java to do:
1. setting of password expiration (on/off)
2. setting of expiration warning (on/off)
3. password syntax checking (on/off)
4. password length (set to desired length)
5. password min age (set to desired duration)
6. password history (enabled/disabled)
7. password storage scheme (set to SHA/SHA/cleartext)
The iDS deployment documentation gives a good explanation on all these, but I can't find any codes/examples on how to do them using the SDK at all.
Does anyone knows where I can find such examples?
Thanks.

Sorry, please ignore this post. I've found what I need.

Unable to set password on outlook 2003. Autoadvice says need to disable Activex. How do I do this?

When changing password details for BTYAHOO.
At last stage message says my security is too good and stops the process - Instruction is to enable Activex.
Where are they?
Only browser is Firefox -Vista-Outlook 2003

Firefox doesn't do ActiveX.
https://support.mozilla.com/en-US/kb/ActiveX

OpenLDAP, password policy.

Hi
I need some help or advice about how to use password policy with ldap authentication. I folowed that manual. I had slapd.conf configurated and I have ou=policies and the cn=default,ou=policies,dc=example,dc=com policy.
Now what shoud I do to let the cliets use that policy? I still have pam_cracklib.so in my /etc/pam.d/system-auth-ac (the clients are CentOS). Should I remove the pam_cracklib.so and add something else?
I red in another place that I should add "pwdPolicySubentry: cn=default,ou=policies,dc=example,dc=com" in the user`s entry, but I am unable to do that. Do you know in which objectClass is that attribute included?
Regards.

I believe that most of pam_ldap modules on these machines understand the Sun DS password policy controls.

Password Policy : PwdMustChange problem

Hi,
i'm facing some strange issues with the password policy under Oracle Directory Server v6.3.
I modified the global policy to force user to change their password after administrative reset.
In the policy i see PwdMustChange set on TRUE.
The problem is that it has no effects on users.
I use several administrative accounts (including directory manager) to change user password (made a reset) and it is still possible to log with their account.
I don't get it, it's like the property PwdMustChange had no effect.
Has anyone faced this problem??
Thanks

The "must change" state does not prevent a user from logging in. It only requires that the next LDAP operation that the user does on that open connection be a MOD where the user changes his own password. All subsequent operations other than the password reset will fail (most likely with err=53 - DSA Unwilling To Perform).
However, many applications will not do anything subsequent as the user. In other words, the BIND will succeed and then the application will go on about its business servicing the user, because the way the application code is written, it doesn't need to do anything other than the BIND to authenticate the user, and the BIND has succeeded.
When an LDAP-enabled application is going to integrate with the LDAP password policy model, it needs to consume LDAP controls properly. In this case, the BIND request and response should include a password policy control that indicates the user must reset his password. This is how, even in the case of an application that need not do anything except BIND, the password policy functionality can work.
If you want to verify that the server's password policy is working, you can do it in a number of ways. If you have the audit log turned on, when the administrative reset occurs, you should see some server-side modifications to the user that set a "must reset" operational attribute. If you do ldapsearch as the user, you should get an informational message that the search has failed. Depending on which ldapsearch tool you use, you may get a fairly informative message about the user needing to reset his password and/or the server being unwilling to service the SRCH request. If your ldapsearch as the user succeeds immediately after the admin reset, then the server password policy is not set up correctly.

Password policy

I am setting password policy in solaris 10, I want that locked account of user should be unlock after some time with ouit the help of system administrator means the account would be unlock after 30 min automatically.

Hi,
Thanks for your reply ...I had already configure the password policy for the solaris servers but when the account got locked, It will only unlocked by the administrator or root user i want that account should be unlock automativally after sometime.

Password policy not applying properly

I have set password policy for my domain that
Maximum age: 60days
Minimum age is: 45days
but I get messages every week that passwords would expire in 4 days
I checked using rsop.msc and policy seems to be correctly applied.
what could be the problem?

> Maximum age: 60days
> but I get messages every week that passwords would expire in 4 days
If your GPO is applied correctly, this simply means that the last
password change was 56 days ago.
> I checked using rsop.msc and policy seems to be correctly applied.
On the client? Your user is not a local user on the client, but most
probably a domain user. So you need to check RSoP.msc on the PDC
emulator, not on the client.
> what could be the problem?
You forgot to link your password policy to the domain, and after doing
so, make sure you move it upwards above the existing "default domain
policy". In the security filter, add at least "Domain Controllers" -
better leave "Authenticated Users". And finally, do not block
inheritance on the "domain controllers" OU.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Password policy to be active at DB level

Dear All,
As per Audit requirement,we have to set password policy at Database level.
Present password policy:-
Parameter:-
1.Password verification NULL
2.Password Lifetime UNLIMITED
Is there any complication after setting password policy ?
Please suggest
Regards,
Mahesh Phegade

Mahesh,
Is there any complication after setting password policy ?
No, thr are no complication . Only thing you need to do is change the password of those user ids regulary before the expiry date
Check below links
http://twit88.com/blog/2008/08/04/oracle-alter-password-policy/
http://articles.techrepublic.com.com/5100-10878_11-5784756.html
http://articles.techrepublic.com.com/5100-10878_11-5784756.html
http://download.oracle.com/docs/cd/B28359_01/network.111/b28531/users.htm
Hope it helps
Thanks
Sushil

Password policy support RedHat openldap client

I am using Directory Server 5.2 patch4 for a naming service for about 250 servers which are mostly Solaris 8 & 9 clients. But I also have some RedHat 2.1, 3.0, 4.0, HP-UX 11, and AIX 5 clients. Does anyone know if and how I can use the password policy I have created in the Directory Server to work with non-solaris clients?
Mike

I believe that most of pam_ldap modules on these machines understand the Sun DS password policy controls.

Setting Password to AD User

Hi ,
Iam working on SAP NWIDM 7.1.
Iam facing issue while setting Password to AD user from IC.
I created one Job thro' RUN JOB Wizard -> Create User in AD to provision users to AD.
Iam trying to set password in the same job which iam using to provision users Create User in AD - by giving Password using the AD parameter userPassword
ex: userPassword -- password@123
Still iam unable to set password for that user.
And one more important thing is my IC system is in the same domain where AD is.
Could experts give me any suggestion on this?
Thanking you inadvance.
Mounika
Edited by: JaguMounika on Jan 4, 2010 8:34 AM

Michael,
As suggested,I tried by using the job *SetPasswordOnActiveDirectory-Windows * in the SAP Provisioning Framework.But when iam trying to execute this job the Job itself is not being triggered.I think the problem is with the Runtime Engine.
Do I need to have anything specific for Windows Runtime Engine ? (I just ran setupwin32.exe from ICRUNTIME installables to install ICRUNTIME.Is it enough for both JAVA and WINDOWS runtime engines or is it specific for JAVA only?).
On the otherhand,I did rewrite the scripts in that SET Password Job(PassOpen,PassNext,PassClose) in JScripts,then i executed the same job by JAVA Runtime Engine,but iam getting 2 Error.And the Error are
*1.ToGeneric.addEntry
undefined: cn=administrator,cn=users,dc=essidm,dc=com - {PWD=pass@123, LGName=cn=administrator,cn=users,dc=essidm,dc=com, SRV=*******, ADMPWD=*****} is not a function.
(I have pass@123 in MX_ENCRYPTED_PASSWORD)
2.putNextEntry failed storing*
Could you please help me in successfully executing this Job?
Thank you,
Mounika
Edited by: JaguMounika on Jan 6, 2010 5:07 AM
Edited by: JaguMounika on Jan 6, 2010 5:47 AM

Unable to set Password Policy controls

Similar Messages

Maybe you are looking for