Novell Home

Solving Password Problems with the Lotus Notes Driver

Novell Cool Solutions: Tip
By Perry Nuffer

Digg This - Slashdot This

Posted: 1 Mar 2006
 

Problem

When processing a modify-password command, the NotesDriverShim checks for an existing and valid 'old-password' match. Thus if the modify-password command is missing an <old-password> value and the existing Notes User already has an HTTPPassword (web password) value set, the modify-password command will fail.

Solution

If the old HTTPPassword value is known (and currently valid in Notes), adding an <old-password> element with the old HTTPPassword value to the <modify-password> command should work. Here's an example:

<input>

  <modify-password class-name="Person" event-id="pwd-subscribe" src-dn="\PWDSYNCTREE\sync\dom\poc\JohnDoe" src-entry-id="35952">

    <association>D9628831A988381AC12570F9005BE6B3</association>

    <old-password><!-- content suppressed --></old-password>

    <password><!-- content suppressed --></password>

  </modify-password>

</input>

If you don't know the old-password, to overcome this security check, try setting the HTTPPassword attribute directly. A command like the following received by the NotesDriverShim should work:

<input>

  <modify class-name="Person" event-id="pwd-subscribe" src-dn="\PWDSYNCTREE\sync\dom\poc\JohnDoe" src-entry-id="35952">

    <association>D9628831A988381AC12570F9005BE6B3</association>

    <modify-attr attr-name="HTTPPassword" is-sensitive="true"><!-- content suppressed -></modify-attr>

  </modify>
</input>


Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com

© 2014 Novell