View user's password attributes

Hi everyone. I have been searching high and low for an answer to this, and as of yet I have not been able to find anything. Pretty much I am looking for the ldapsearch command to allow me to see when a user's password will be expiring. I am using DSEE 6.3. Any help with this would be appreciated it.
thanks,
John
Edited by: edsrixix on Jul 8, 2009 9:46 AM

If you're using the default DS5-compat password policy mode, then the attribute you want is passwordexpirationtime. This has to be specifically requested in the ldapsearch.
[http://docs.sun.com/app/docs/doc/820-2767/passwordexpirationtime-5dsat|http://docs.sun.com/app/docs/doc/820-2767/passwordexpirationtime-5dsat]
If you are using the DS6-migration mode or the DS6-mode, then you should look at pwdchangedtime in the user's entry coupled with pwdmaxage in the password policy to figure out the expiry date.
[http://docs.sun.com/app/docs/doc/820-2767/pwdchangedtime-5dsat|http://docs.sun.com/app/docs/doc/820-2767/pwdchangedtime-5dsat]
[http://docs.sun.com/app/docs/doc/820-2767/pwdmaxage-5dsat|http://docs.sun.com/app/docs/doc/820-2767/pwdmaxage-5dsat]
You can check which password mode you are in by running:
$ dsconf get-server-prop pwd-compat-mode

Similar Messages

Does GTC generate default value for Password attribute.??

I am using GTC as trusted source reconciliation.
My doubt is if I don’t map the password attribute does it generate default value to the password attribute in user form??
I have a random password generator in pre-insert, first i tried as below which didn't work later after updating it worked fine.
IF (password=null)
Generaterandampassword
SetPassword= Generaterandampassword
If i use adapter as above it not generating random password. i see that password as 'temp' to all the users.
I am thinking gtc generates a value to password filed even if we don't pass any value... am i right?? Please let me know..
Thanks..
Edited by: IDMuser19 on Aug 17, 2010 10:30 AM

Hey,
See if this helps.......
http://www.oracle.com/technology/obe/fusion_middleware/im1014/oim/obe12_using_gtc_for_reconciliation/using_the_gtc.htm
Regards,
Sunny Ajmera

How can I Change a User's password remotely

Hi all
I setup an iChat Server. I need to allow the users the ability to change their password without physically accessing the server (including via Remote Managment)
Thow some iChat(jabber) Clients support changing the password, the iChat Server does not appear to have this option.
Is there any way to remotely change a user's password ?
A possible solution would be to setup a Webpage allowing the user to logon and change the Password.
Is there any web managment tool on OS X Server for this ?
Any other sugestions?
Thanks,
Best regards

This is getting depressing. I've just speand most of a day getting the OID to support ldaps SSL protocol, since I read that a number of active directory services only allow password change if the connection is encrypted. Finally got my ldaps connection, but the NoPermissionException is still there. The user I'm signing on as is definitely has user security management permissions. I can't seem to modify attributes at all. I added my own optional attribute to the schema, but JNDI can't set it.
Perhaps the oracle LDAP library in jpdk might help, but I'm not hopeful. If I could find any API documentation I might be more moved to try, but I see no setPassword methods in the relavant classes. This just looks like a fairly thin wrapper for JNDI anyway.
Does anyone know where the API doc for oracle.ldap.* is? Has anyone got a password to change other than by the SSO's built in change password dialog?
I'm not hopeful. On these boards I've found many questions along these lines but, thus far, no answers.

OIM 11g R2 - User random password Generation

Hi All,
In my case users are getting created in OIM using Trusted source reconciliation and need to populate a random password for each user.
Please suggest me which of the following methods is better and why?
Method 1: Created a post Event Handler and populate password attribute. This case I created a custom Post event handler and populated password attribute and is success but the password stored in database is plain text and so not able login to Adminconsole with same password. So, how to encrypte password and then store in DB?
Method 2: Create entity adapter and attach to user form using Data object manager
Or, please suggest me any other best way.
Thanks in advance.

Hi,
Users are being created thru trusted source recon and password is not automatically getting populated. I verified it, by checking USR_PASSWORD attribute in USR table and it is empty.

Error: sql.SQLError: [-4008] (at 1) Unknown user name/password combination

Hello Experts,
After a Test refresh for SCM system, we restored Livecache. The database has been changed and starts using database manager, during registration (Register LCApps) it gives the following error:
Logical Command: DBMRFC
Parameter: exec_lcinit register
Name and Server     : LCQ - dusepierp12
DBMRFC Function     : DBM_EXECUTE
Command             : exec_lcinit register
Error               : DBM Error
Return Code         :     -24964
Error Message       : ERR_EXECUTE: error in program execution#
0,sap\lcinit LCQ register -uDBM , -uDBA , -uSQL ,
liveCache LCQ (register)
The liveCache state is ONLINE
DBMServer 7.6.04   Build 009-123-182-193
Creating liveCache application procedures
ERROR : liveCache LCQ not registered (see "s:\sapdb\data\wrk\LCQ\lcinit.log").
START *****************************
liveCache LCQ (register)
Thu 07/30/2009
10:26 PM
installation path = S:\sapdb\LCQ\db
OK
DBMServer 7.6.04   Build 009-123-182-193
Creating liveCache application procedures
ERR
-24964,ERR_EXECUTE: error in program execution
1,""S:\sapdb\LCQ\db\bin\x_python" "S:\sapdb\LCQ\db\env\lapps.py" -R "S:\sapdb\LCQ\db" -d LCQ -u DBADMIN,*"
Traceback----
Error----
sql.SQLError: [-4008] (at 1) Unknown user name/password combination
Traceback (most recent call last):
File "S:\sapdb\LCQ\db\env\lapps.py", line 38, in ?
    connectAndInstall (install, install.__doc__)
File "S:\sapdb\LCQ\db\env\installib.py", line 398, in connectAndInstall
    session = connect (options)
File "S:\sapdb\LCQ\db\env\installib.py", line 350, in connect
    alterUserNotExclusive(options)
File "S:\sapdb\LCQ\db\env\installib.py", line 338, in alterUserNotExclusive
    session.release()
AttributeError: 'NoneType' object has no attribute 'release'
ERROR : liveCache LCQ not registered
Thu 07/30/2009
10:26 PM
END ******************************
Many Thanks,
TIA,
Nisch

Nischal Mahakal wrote:>
> Hello Experts,
>
> After a Test refresh for SCM system, we restored Livecache. The database has been changed and starts using database manager, during registration (Register LCApps) it gives the following error:
> -24964,ERR_EXECUTE: error in program execution
> 1,""S:\sapdb\LCQ\db\bin\x_python" "S:\sapdb\LCQ\db\env\lapps.py" -R "S:\sapdb\LCQ\db" -d LCQ -u DBADMIN,*"
> -
Traceback----
Hi there,
looks like you entered "DBADMIN" when you created the liveCache instance in DBMGUI as the DBM Operator.
For SAP installations, this user is always named "CONTROL".
So, drop the instance again, recreate it with "CONTROL" and re-do the recovery of the liveCache backup.
regards,
Lars

Unable to view user login in OS X Lion 10.7.3 startup

unable to view user login in OS X Lion 10.7.3 startup. I had made some changes in icloud settings & by mistake must have checked some option related to username & password. Also when i turn my macbook pro on, i can see the grey background with apple logo, however it does not show my image & login password space. thus i'm unable login to my system. please help

hey ..was able to solve the problem,,had selected "name & password" in "display login window" option of "user & group" of system preference. That's why was unable to view my login username.
How i resolved it - after turning my macbook pro on, i pressed "shift" key...that way it opened in safe mode...& then went to system prefernce & again selected the previous option of "list of users" in display login window option. nyways thanx for helping out

What is the user and password to Oracle 8.17

Dear expert,
I have loaded IDES 4.7 with Oracle 8.17.
I wish to query the SAP table using Oracle PL/SQL.
What is the user, password and string to login into SAP Oracle database? Since I was not asked for user and password when installing Oracle I do not know how to login.
Also can you let me know how to view/change table fields in SAP tables. I understand there are different ways but which in your opinion is the easiest to find the record I want to correct(as some tables have many fields).
Your kind assistance is appreciated.

Thank you for your reply. Both the user and password does not work on my IDES 4.7e system.
However I tried with user Internal and without password and I successfully login.
I then create a new user and also change the user=system
password.

POP3 -Keep asking for user name & Password

Hi,
We have exchange 2003 server with Service pack 2. We have user who check their mails through Outlook 2003, Outlook web access & some users are using POP3 to download the messages.
Since last few weeks, we are getting the complained that when engineers are trying to configured users account in Outlook with POP3 configuration, its keep asking for user name & password. But with same user name & passwords user is able to check their mail through Outlook web access.
In some of our site, users are able to download messages through pop3 account but this account was configured long back.
Kindly advise.

HI,
This is happening mainly when
1. user changed his password through Outlook web access next time its keep poping up for password & it will not accept the new passord.
2. if user is using OWA & when we try to configured his mail in Outlool with POP3 .
See if i remove exchange attributes from user's account & then delete the users from AD & Recreated with same user name, Password & reconnected to that user to his old mailbox, it;s work fine.
Regards,
Chetan
POP3 is enabled by default for all the users.

When trying to send photos using iphoto a window comes up and says that email server did'nt recognize user name /password ...what do i do to correct this please marie

hello when I try to send photos using the iphoto a window comes up to tell me that my email server didn't rercognize user name /password how do i correct this .. as i have cganged my email address but i can't get rid of the old one thank you marie

Hi Cody\'sgirl,
If you are having issues emailing photos directly from iPhoto, you may want to double check the email account information that is set in iPhoto. You may find the following article helpful (the section below is about setting up a new account, but it should be the same location to check existing account info):
To set up a Photo Mail account:
Choose iPhoto > Preferences, and then click Accounts.If you’re in full-screen view, move your pointer to the top of the screen to make the menu bar appear.
Click the Add button in the lower-left corner.
Click Email, and then click Add.
Choose your email service provider.If your service provider isn’t listed, choose Other.
Type the requested information.If you use the Mail application included with OS X, some account information might be filled in already. If you’re not sure what to type, contact your service provider.
You can set up more than one Photo Mail account by repeating these steps for each account. When you send an email, you can change the outgoing account by clicking the From pop-up menu and choosing an account.
iPhoto '11: Email your photos
http://support.apple.com/kb/PH2421
Regards,
- Brenden

Retrieve User account Password

Hi
I need to retrieve the users account password and compare it with another encrypted attribute... i am thinking i will compare it in bit form but i m unable to retrieve the user password in the first place..
Any suggestions?
Edited by: 903843 on Apr 5, 2012 9:36 AM

Hey Bikash thanks for the quick response.. and correct me if i am wrong ...I had come across this forum before ...the solution you have provided requires to actually fire a query to the db I want to avoid that...the other solutions are for 10g while i am working with 11g 11.1.1.5 to be precise.

Changing a deleted user's password

I recently had a deleted user where I needed to recover some emails from.
I restored a copy of the post office, placed this copy to allow direct
access and opened their mailbox using the /ph- switch.
However this user had placed a password on their mailbox. Luckily I was
able to figure out what the password was. However it occured to me that
I wouldn't have known how to clear this password because her mailbox was
"offline".
Does anyone know what I could have done to change/remove the users'
password?
Thanks.

Edward van der Maas wrote:
> Brian Mantler wrote:
>
>> I recently had a deleted user where I needed to recover some emails
>> from.
>>
>> I restored a copy of the post office, placed this copy to allow
>> direct access and opened their mailbox using the /ph- switch.
>>
>> However this user had placed a password on their mailbox. Luckily I
>> was able to figure out what the password was. However it occured to
>> me that I wouldn't have known how to clear this password because her
>> mailbox was "offline".
>>
>> Does anyone know what I could have done to change/remove the users'
>> password?
>>
>> Thanks.
>
> gwcheck | select reset client options and check 'clear user's password'
>
I have now tried this, but it does not seem to clear the user's password.
I have included the gwcheck.log file below.
Any ideas?
Thanks.
================================================== ==============================
===== BEGIN - JOB LOG
================================================== ========
================================================== ==============================
================================================== ==============================
===== TASK LOG - 0 (46b9a715.ckl)
==============================================
================================================== ==============================
Novell GroupWise - GWCHECK - Version 7.0.1
Processed on Wednesday, August 8, 2007 - 11:20 am
Processing information for this run:
Path to PO = E:\post
Post Office= COE
User = testpocoe
Action = Resetting Preferences
Verbose = Yes
Upd DiskSpace= No
Output log = gwchk32.log
GWCHECK user options analysis:
- options are consistent.
STRUCTURAL VERIFICATION of system databases
STRUCTURAL VERIFICATION of database ngwguard.db
- Database is structurally consistent
Reading Guardian Database store catalog info
Searching for User/Post Office information for testpocoe
Processing Post Office = COE path = E:\post
- User found, Fid=go7, Diskid=187, PO=COE, Path=E:\post
RESETTING user preferences for user database E:\post\ofuser\usergo7.db
- resetting record 41000 - type = ENVIRONMENT
- resetting record 41001 - type = SEND
- resetting record 41002 - type = VIEWS
- resetting record 41018 - type = TRANSACTION
PROCESSING COMPLETED- total processing time: 0:00:01
Processing completed
***** OVERALL STATS FOR THIS RUN *****
Uncorrectable conditions encountered:
- No problems found
Correctable conditions encountered:
- No problems found
Overall processing time for the entire job: 0:00:03
Accumulated task processing times spent on the job: 0:00:03
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
================================================== ==============================
===== END - JOB LOG
================================================== ==========
================================================== ==============================

Exempt UME user for password expiration

Is there a way to exempt a user from the password expiration setting? For example, passwords for all users are set to expire every 90 days, but a user id, say "monitor_user", is used in monitoring application to perform an automated logon check. Every 90 days when the password expires, the monitor fails. Is there a way to set this user's password not to expire?
Thanks

Glen and Giorgio,
Let me see if I can clear things up a little bit.
First, there is the security policy which is controlled by the UME properties. This defines password length, logon ID length, etc. These properties apply to the entire AS Java and cannot be trimmed down for individual users. How they apply to users in different data sources also varies. For example, these properties are ignored to some extent if you have an ABAP system as your user store. See the following link:
http://help.sap.com/saphelp_nw04s/helpdata/en/7f/c52442ad9f5133e10000000a155106/frameset.htm
Second, as of NW 04s SPS 7 a new user attribute was added, named "security policy". For individual users you can choose one of the following security policies:
default users (user can logon, password rules apply)
technical users (user can logon, password does not expire)
internal service users (user cannot logon, usually do not have passwords)
There is a fourth policy: unknown users, applies to certain users mapped from an AS ABAP.
In SPS 7 I believe and latest in SPS 8, you have limited abilities to change the security policy of the user with identity management. You can change the policy from unknown or default to technical but not back.
In SPS 9 and later you can change the policy from unknown or default to technical and from unknown or technical to default.
I wonder if support misunderstood your question and thought you were referring to the first type of security policy and not the second.
Message was edited by: Michael Shea

ACS 5.5 External User with Internal Attribute

Hi Guys,
i'm wondering, if i using LDAP for external authentication, can i use the internal identity attribute?
for example :
i create an user X , his password type is LDAP, but the identity group is "Group 1"
can i define rules
Idenitty Group in "Group 1" permit access ?
or i need to do group mapping first?
Thanks,
Regards,

It is possible to define an internal user whose password is taken from an external store.
In internal user definition select "Password Type" to be the LDAP database and then define the rest of the user definition, including identity groups, as desired

How view base station password

how view base station password?

See this User Tip from forum expert Tesserax:
AirPort - Regain Access from Forgotten Passwords

How to change SSO user's password: Get LDAP URL

Hi,
I would like to add a 'change user SSO password' form to my BC4J application. The form's submit button fires an action that calls a PL/SQL package. This package receives 7 parameters, and uses de dbms_ldap package to change the user's password.
Parameters:
- LDAP Host
- LDAP Port
- User DN
- SSO Username
- Old Password
- New Password
- Retyped New Password (for confirmation)
I'm trying with a DataForwardAction event whose purpose is to get the user's account information and the LDAP location, but I can't get the LDAP Location (ClassCastException) and the SSOUsername (NullPointerException).
I'm using JDeveloper 10.1.2.0.0 (Build 1811)
My question is: ¿What am I doing wrong? ¿Is there any easier way to do this?
The code is below:
import javax.servlet.http.HttpServletRequest;
import oracle.adf.controller.struts.actions.DataActionContext;
import oracle.adf.controller.struts.actions.DataForwardAction;
import oracle.security.jazn.JAZNConfig;
import oracle.security.jazn.spi.ldap.LDAPJAZNProvider;
public class ChgPwdAction extends DataForwardAction
public void onChange(DataActionContext ctx) throws Exception
    HttpServletRequest request = ctx.getHttpServletRequest();
    String host                = null;
    String port                = null;
    String userDN              = null;
    String SSOUsername         = null;
    String oldPwd              = null;
    String newPwd              = null;
    String confirmNewPwd       = null;
    try
      LDAPJAZNProvider ldapProvider = (LDAPJAZNProvider)JAZNConfig.getJAZNConfig().getJAZNProvider();
      host = ldapProvider.getJAZNConfig().getLocationURL().getHost();
      port = "" + ldapProvider.getJAZNConfig().getLocationURL().getPort();
    catch (ClassCastException e)
      //System.out.println(e);
      throw new Exception("Missing LDAP location");
    try
      userDN = request.getHeader("Osso-User-Dn");
    catch (NullPointerException e)
      //System.out.println(e);
      throw new Exception("Missing User DN.");
    SSOUsername   = request.getRemoteUser();
    oldPwd        = (String)request.getParameter("oldPwd");
    newPwd        = (String)request.getParameter("newPwd");
    confirmNewPwd = (String)request.getParameter("confirmNewPwd");
    request.setAttribute("Host", host);
    request.setAttribute("Port", port);
    request.setAttribute("UserDN", userDN);
    request.setAttribute("SSOUsername", SSOUsername);
    request.setAttribute("OldPwd", (String)ctx.getHttpServletRequest().getParameter("oldPwd"));
    request.setAttribute("NewPwd", (String)ctx.getHttpServletRequest().getParameter("newPwd"));
    request.setAttribute("ConfirmNewPwd", (String)ctx.getHttpServletRequest().getParameter("confirmNewPwd"));
    //System.out.println (userDN + "-" + SSOUsername);
// To override a method of the lifecycle, go to
// the main menu "Tools/Override Methods...".
}Thanks in advance.

Hi again,
First of all, thanks for your reply.
Yes, I know I can use JNDI instead of a call to a PL/SQL package (I visited this link: http://forum.java.sun.com/thread.jspa?threadID=592611&start=0 that explains how to do it), but in both cases I have the same problem: I don't know if it's possible to get the LDAP's environment specifications (PROVIDER_URL, SECURITY_PROTOCOL) dynamically.
Our production environment's LDAP is not the same as our development environment's LDAP. This is why I want to get this information dynamically.
I think that this information is stored in the jazn.xml file: Is there any way to get this information?
Thanks a lot.

View user's password attributes

Similar Messages

Maybe you are looking for