Anonymous_User Absent Member.
Absent Member.
254 views

Fetch modify password event from UserApp


Hi everybody,

For some reasons, i have to set an attribute when a user changes his
password from the userapp.

Unfortunately, it seems that we can't grab the event on the driver.

Indeed, if we had the nspmDistributionPassword as a "notify" attribute
on the driver filter, we don't see anything in the trace.

Does someone have an idea ?

Thank you


--
vpihen
------------------------------------------------------------------------
vpihen's Profile: https://forums.netiq.com/member.php?userid=5615
View this thread: https://forums.netiq.com/showthread.php?t=49126

Labels (1)
0 Likes
11 Replies
Knowledge Partner
Knowledge Partner

Re: Fetch modify password event from UserApp

On 11/4/2013 12:07 PM, vpihen wrote:
>
> Hi everybody,
>
> For some reasons, i have to set an attribute when a user changes his
> password from the userapp.
>
> Unfortunately, it seems that we can't grab the event on the driver.
>
> Indeed, if we had the nspmDistributionPassword as a "notify" attribute
> on the driver filter, we don't see anything in the trace.


That is interesting. See if eventing on nspmPassword works. It turns
out both attributes are properly exposed to the driver shim.

I.e. It is possible that the UA is setting the Universal Password, which
is technically distinct from the Distribution Password. The sync of UP
to DP should have triggered an event, but usually it is the sync of DP
(set via a driver using the nspmDistributionPassword) to UP
(nspmPassword) that happens.



0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp


After setting up the nspmPassword as "notify" on the userapp driver
filter, nothing happened after changing the password on an account.

The user didn't even appear on the trace file.


--
vpihen
------------------------------------------------------------------------
vpihen's Profile: https://forums.netiq.com/member.php?userid=5615
View this thread: https://forums.netiq.com/showthread.php?t=49126

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp

vpihen <vpihen@no-mx.forums.netiq.com> wrote:
> After setting up the nspmPassword as "notify" on the userapp driver
> filter, nothing happened after changing the password on an account.
>
> The user didn't even appear on the trace file.
>


UserApp doesn't work in the same way as other IDM drivers.

Specifically, the driver is not used for operations like password change.

Instead the password change is made via a ldap connection to the eDirectory
server specified when user app was originally configured.

Thus, this change can be triggered on by setting npsmDistribution password
to subscriber notify in for example a null driver. However I can't think of
a good way to distinguish such an event from other password changes
initiated outside of IDM.

--
If you find this post helpful and are logged into the web interface, show
your appreciation and click on the star below...
0 Likes
Knowledge Partner
Knowledge Partner

Re: Fetch modify password event from UserApp

On 11/5/2013 4:06 AM, vpihen wrote:
>
> After setting up the nspmPassword as "notify" on the userapp driver
> filter, nothing happened after changing the password on an account.
>
> The user didn't even appear on the trace file.


Oh, you think the password change is coming through the driver.

Sorry, no. LDAP password change. Your other drivers should see the event.


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp


Could I get the source of the changing password operation ?


--
vpihen
------------------------------------------------------------------------
vpihen's Profile: https://forums.netiq.com/member.php?userid=5615
View this thread: https://forums.netiq.com/showthread.php?t=49126

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp

vpihen <vpihen@no-mx.forums.netiq.com> wrote:
> Could I get the source of the changing password operation ?
>


All you are going to get in the IDM event is the server name where the
password change was performed.

--
If you find this post helpful and are logged into the web interface, show
your appreciation and click on the star below...
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp

On Mon, 04 Nov 2013 17:07:08 +0000, vpihen wrote:

> For some reasons, i have to set an attribute when a user changes his
> password from the userapp.


Is the UserApp the *only* way a user can change their password? If not,
you're probably not going to be able to do this.


> Unfortunately, it seems that we can't grab the event on the driver.


The UserApp doesn't use its IDM driver to change passwords, as far as I
know. It does an LDAP bind and uses that connection to change the
password.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support provided via email.
If you find this post helpful, please click on the star below.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp


No that's not the only way, that's why i want to identify this precise
action.

Can we put a flag on the change password form of the userapp ?


--
vpihen
------------------------------------------------------------------------
vpihen's Profile: https://forums.netiq.com/member.php?userid=5615
View this thread: https://forums.netiq.com/showthread.php?t=49126

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp

vpihen wrote:

>
> No that's not the only way, that's why i want to identify this precise
> action.


Have you thought about using Self Service Password Reset instead of
userapp - it has the ability to perform a some actions after a
sucessful password change.

> Can we put a flag on the change password form of the userapp ?


I suggest you create a new thread in the userapp-workflow about this.

--
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp

On Thu, 07 Nov 2013 08:04:02 +0000, vpihen wrote:

> No that's not the only way, that's why i want to identify this precise
> action.


You won't be able to, then.


> Can we put a flag on the change password form of the userapp ?


No, because it's just an LDAP bind with the user's credentials, and the
user submitting a password change. It looks (and is) just like every
other password change.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support provided via email.
If you find this post helpful, please click on the star below.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Fetch modify password event from UserApp


You could build your own Workflow that can change passwords:

http://tinyurl.com/qxsojjg

Add an attribute to the Password Change Entity and write your flag at
the same time as the new password.

Expose that workflow via a Resource Request assigned to Password
Management to replace the Change Password Link.


--
gholdefe
------------------------------------------------------------------------
gholdefe's Profile: https://forums.netiq.com/member.php?userid=318
View this thread: https://forums.netiq.com/showthread.php?t=49126

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.