Userinfo.asp and getting the info back

Question

Hi All,
I'm probably being really stupid here but I need some help.
We have modified userinfo.asp to pick up settings from our SSO LDAP source. As far as I can tell this seem to have worked in that there are no errors. Running request server.variables (ALL_HTTP) I can see that it has picked up the user email addresses.
Now the problem is trying to pull this setting into a gadget. We are still running 4.5WS SP2 so all help is from the gadget book for this version.
I've tried following the examples and made a simple gadget which is
<%Dim objSettings, dictUserInfoSet objSettings = Server.CreateObject("GSServices.Settings")Set dictUserInfo = objSettings.GetUserInfoSettingsDim cUserMailcUserMail = dictUSerInfo("mail")%>Your email address is: <%=cUserMail%>
the call for 'mail' is set in userinfo.asp
vRequestedAttributes(0) = "cn" vRequestedAttributes(1) = "givenname" vRequestedAttributes(2) = "sn" vRequestedAttributes(3) = "mail"
Thing is that this displays nothing apart from the test. I've made sure these variables are added to the user information in the gadget wizard but still no luck. Could somebody please point out the obvious error.
Thanks Adam
If you are interested the full userinfo.asp code is
Sub PassUserInfo(ptSession, objSSOInfo) Dim lAuthSourceID Dim pUserInfo Dim strUserNameForBind Dim strUserPasswordForBind Dim vRequestedAttributes(4) Dim strObjectForQuery Dim objLDAPQueryTool
Err.Clear On Error Resume Next
Const strQueryFilter = "(objectclass=*)" Const strDelimiter = ";" If Instr(1, ptSession.CurrentAuthUniqueName, "o=Wiley") Then lAuthSourceID = Application("JWAUTHSOURCE")
Set pUserInfo = ptSession.UserInfo
strUserNameForBind = ptSession.CurrentAuthUniqueName strUserPasswordForBind = objSSOInfo.BasicAuthPassword
vRequestedAttributes(0) = "cn" vRequestedAttributes(1) = "givenname" vRequestedAttributes(2) = "sn" vRequestedAttributes(3) = "mail"
strObjectForQuery = ptSession.CurrentAuthUniqueName If (Application("bLDAPQueryToolProviderInitialized") = False) Then Application.Lock() If (Application("bLDAPQueryToolProviderInitialized") = False) Then Set Application("objLDAPQueryToolProvider") = ptSession.AuthSources.Open(lAuthSourceID).AuthSourceProvider Application("bLDAPQueryToolProviderInitialized") = True End If Application.UnLock() End If
Set objLDAPQueryTool = Application("objLDAPQueryToolProvider").Interfaces("IPTLDAPQueryTool") Call objLDAPQueryTool.Search(strObjectForQuery, strQueryFilter, vRequestedAttributes, strUserNameForBind, strUserPasswordForBind, pUserInfo, strDelimiter)
If (err.Number <> 0) Then Response.End Response.Write("<BR><B>There was an error while connecting to the LDAP repository</B><BR>") Response.Write("Please contact your system administrator") End If End IfEnd Sub

Answer 1

The problem you're experiencing with objSSOInfo.BasicAuthPassword in the userinfo.asp page could be due to checking "remember my password" on the login screen. When that happens, the users password is encrypted and written to the Plumtree cookie. This frustrated us for a little while, because autologin still applies all our user info settings, but was not picking up password. It was blank, as you stated.
This is what we did to fix the problem:
In the newutility.asp page under PortalPages\Common we pick up the password used for autologin, and add it to a session variable. This page is called before userinfo.asp in the autologin process. Here's a code example:(from the AutoConnect subprocedure in newutility.asp)
strDP = ptCryptographer.Decrypt(Request.Cookies("PTLogin")("Password")) Session("tmpPassword") = strDP
Then, in the userinfo.asp page we have conditional logic to see if the session variable is blank, if it is not = "" then we know to pick up password from the session variable. If it is = "" then we pick up the password from objSSOInfo.BasicAuthPassword. Here's more code example (from userinfo.asp):
--------Dim sPasswordDim sPasswordEncryptedDim objCryptographerSet objCryptographer = Server.CreateObject("PTGRemote.PTRCryptographer")objCryptographer.Initialize("blahblah")if Session("tmpPassword") = "" then sPassword = objSSOInfo.BasicAuthPasswordelse sPassword = Session("tmpPassword")end ifsPasswordEncrypted = objCryptographer.Encrypt(sPassword)
Call PopulateUserInfo("ECPassword", sPasswordEncrypted, pUserInfo)Call PopulateUserInfo("UEPassword", sPassword, pUserInfo)--------
Sub PopulateUserInfo(inName, inValue, pUserInfo) Call pUserInfo.AddUserInfoSetting(inName, inValue)End Sub
This works 100%, just be sure to not clear out the tmpPassword session variable, or you'll lose the password.
More things to note. The E2K portlet suite expects the users password (when using user info settings) to be passed plain text, unencrypted. That's pretty bad (in my opinion), but that's the way it works. We've had a myriad of problems with this portlet suite (version 3.0.2). I'd love to talk with some other customers using user info settings for these portlets to compare notes, and see if you're running into some of the same issues we are.
Jason OdomCox Enterprises