allenmorris Absent Member.
Absent Member.
1063 views

Updating challenge questions from Universal PWD and eDir

Hello,

I'm running into an issue updating our challenge questions on our SSPR install.

Our SSPR is a few years old had as been working great. When we set it up originally we configured two set of challenge questions, one for our Faculty and one for our Students. Our powers-to-be are now going to have Students use SSPR and they would like our Challenge Questions changed. I used iManager to change the Universal Password Policy and the challenge questions associated with the Students. Then I started testing I was still getting the original questions. The new questions are not reaching SSPR.

Our SSPR server is set up to use LDAP to our IDM vault for password related items. I've read through the procedure a few times already and have "checked" the boxes when comparing the process to how my SSPR is configured. I kind of remember setting up a text file, though that may have been for something different, since I do not find anything online about a test file for challenge responses. Could I missing something?

Any suggestions are greatly appreciated.

Many thanks,

Allen
0 Likes
5 Replies
Knowledge Partner
Knowledge Partner

Re: Updating challenge questions from Universal PWD and eDir

Just to be clear, which version of SSPR are you using? Also, within SSPR
are you telling the system to use the eDirectory challenge response
information as opposed to the SSPR bits?


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
allenmorris Absent Member.
Absent Member.

Re: Updating challenge questions from Universal PWD and eDir

Ab,

Does the SSPR server need to be unlocked for the configuration to update?

How to I force a read when unlocked? Login into SSPR as a student when it's unlocked?

Manya thanks,

Allen
0 Likes
Knowledge Partner
Knowledge Partner

Re: Updating challenge questions from Universal PWD and eDir

On 09/10/2018 01:44 PM, allenmorris wrote:
>
> Does the SSPR server need to be unlocked for the configuration to
> update?


Not technically; you could modify the SSPRConfiguration.xml file manually
and directly, but usually if you want to change SSPR's main configuration
you unlock it and do it via the web UI. Maybe I am misunderstanding the
question.

> How to I force a read when unlocked? Login into SSPR as a student when
> it's unlocked?


I think it should be checking NMAS regardless.

It may be worthwhile to throw SSPR on a new box and see how it behaves
with the current version. If it behaves differently, properly, great; if
not, it's easier to troubleshoot with current code.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
allenmorris Absent Member.
Absent Member.

Re: Updating challenge questions from Universal PWD and eDir

ab,

Thanks for your response.

We are at Version 3.3, I know it's a bit older.

I have told SSPR to use LDAP and pointing it to our eDirectory LDAP server. I also have the box checked to use eDirectory Challenge Sets checked.

The Wordlist and Max question Chars on the same page are not set.

Allen
0 Likes
Knowledge Partner
Knowledge Partner

Re: Updating challenge questions from Universal PWD and eDir

It's been a long time since I've done this, and things may have changed, but:
I thought if you changed the UP questions, that the users were not prompted to re-enter answers unless:
a) their password expired (whenever that may be)
or
b) there was a tickbox or something somewhere (maybe in the NMAS stuff) that would force them to do this on the next login?
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.