OAM: password policy coherence between the Server LDAP and OAM

Customer has an OAM installed using an LDAP server, say MS - AD 2003, as users, policies, and the configuration data store.

The customer has configured their LDAP server, password policies claiming for example that the users passwords expire 60 days after they have been fixed and this departure 5 days before they expire, users, at the opening of the session, should be warned that their passwords are about to expire.

Customer has configured identical policies inside the OAM.

(A) consider the following sequence:

Day X: user connects to the 'User Manager' component of OAM in the identity and, through 'My profile' admin console, changes his password.

Day X + Y (1 < = Y < 55): the user connects to the MS - AD domain and sets its password interfacing directly the LDAP server, outside of OAM (for example: by pressing CTRL-ALT-DEL and invoking 'Change Password' in a field of MS-Windows, MS - AD-controlled).

Question A.1) day X + 56: user tries to access a web resource protected by OAM: OAM made realize that the user has changed the password recently (through the LDAP server), and that should NOT be notified?

Question A.2) day X + 61: user tries to access a web resource protected by OAM: OAM made realize that the user changed the password recently (through the LDAP server), and that should NOT be asked to change his or her password again?

(B) consider the following sequence:

Day X: user connects to the MS - AD domain and sets its password interfacing directly the LDAP server, outside of OAM (for example: by pressing CTRL-ALT-DEL and invoking 'Change Password' in a field of MS-Windows, MS - AD-controlled).

Day X + Y (1 < = Y < 55): the user connects to the 'User Manager' component of OAM in the Administration of identity and through 'My profile' console, changes his password.

Question B.1) day X + 56: the user is trying to connect to the MS - AD domain: MS - AD made realize that the user has changed his password to recently (OAM), and as it should NOT be notified?

Question B.2) day X + 61: the user is trying to connect to the MS - AD domain: MS - AD made realize that the user has changed his password to recently (OAM), and that should NOT be asked to change his or her password again?



Kind regards


Angelo Carugati

(A) you're done. OAM is not aware of changes in password performed at the entrance to the user if the change does not take place through OAM. There is no good solution because you have two different versions of the truth, even if they are logically equivalent policies with us will tell the expiry of 60 days, apply to the same person. A possible solution is to be synchronized with the attributes that store things password policies in AD (as when the user has changed the password) to the attributes of the political equivalents of associated storage stuff in OAM password (as when the user has changed the password - oblastsomething). I don't know if this synchronization is still possible, but it's an idea. AD and OAM attributes can both live in AD, but they are distinct attributes in separate containers.

(B) you are ok. AD is aware of the change, and is aware of the change.

Tags: Fusion Middleware

Similar Questions

  • What ports to use between the server host and ESX license

    Hello

    I've implemented a standalone ESX host and want it connects to the license server.

    Is there anyone knows what port must be open for the connection from the host ESX to the license server?

    Thank you!

    LAN

    27010

    27000

    See http://vmetc.com/2008/11/06/vmware-vi-35-port-diagram/ for full information

  • I sync my passwords with sync and now I have disabled this feature, passwords are removed from the server?

    I used sync to synchronize passwords between two laptops, but I want to know if was to disable this feature will be the passwords are kept on the server? If this is not the case, how to remove them.

    No they are not deleted from the synchronization server when you disconnect the sync, but if you change your password for your Firefox account all your data will be erased of the synchronization server.

  • I finished the installation of Sharepoint 2010 and he is told to use the username and password you loged on the server with does not work. What should I do to access the sharepoint URL?

    I finished the installation of Sharepoint 2010 and went through the Setup Wizard. It is said to use the username and password you loged on the server with does not work. What should I do to access the sharepoint URL?

    Hello

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Forum. You can follow the link to your question:
    http://social.technet.Microsoft.com/forums/en-us/sharepoint2010general/threads

  • I got the message "the u of typed password does not meet password policy requirements, check the minimum password, the password complexity and password history requirements" when changing password

    Original title: password problem

    When I try to write a new password on my windows ultimate 7, I received this message.

    "the u of typed password does not meet password policy requirements, check the minimum password length, password complexity and password history requirements"

    What can I do? I can't change my password :(

    Hi MedoXW,

    This means that you must create a password that meets all of the requirements

    1. make sure that the password is at least 6 to 8 characters.

    2. make sure that the password includes at least 1 capital letter, 1 number and a symbol as "!" or "$".

    3. make sure that the password is not one that you have used in the past.

    Follow all these rules and it should work.

    I hope this helps.

  • How can I locate the server info and start it I can send documents

    I can't send or send my 'file documents' file incorrect server. How can I locate the server info and start it I can send documents

    I have a problem, find out who is my server and then set this info in my PC so that I can send or send my files that are in my Document folders

    http://www.SimpleHelp.NET/2007/02/07/a-beginners-guide-to-setting-up-Windows-Mail/

    Link above has an easy to follow Guide to set up Windows Mail.

    Contact your ISP (Internet Service Provider).

    They offer your broad band/Dial-up connection.

    Ask them to:

    username
    password for your service account to wide band/Dial-Up with them

    Server of incoming POP3 mail
    outgoing mail SMTP server

    The above information is required to set up Windows Mail.

    ISPS are usually happy to help you set up your email account.

    See you soon.

    Mick Murphy - Microsoft partner

  • You can install the server connection and security on the same virtual machine Server?

    I was looking around and found an old post that says that you could do.

    I tried the documentation view 5 but not a lot of luck there.

    If the deployment is small say 20 users view total.

    Could install you the connection and security on the same VM Server?   W2K8R2 64-bit?

    I certainly understand some of the security risks.

    TIA

    Marc Alumbaugh says:

    Any other ideas?

    No other ideas, but we have should stick to previous ideas and continue to work through them. You make progress in this analysis - continue! When it is correctly configured, you have configured the firewall/proxy etc don't not to block PCoIP and that you use at least seen 4.6 on the Client and the server, it does not work.

    It always seems that there's something blocking PCoIP in your environment - where the black screen.

    So when 'PCoIP external URL' on the login server is defined on InternalIP:4172, your View on the internal network Client connects fine. If you run Wiresahrk on your connection to the server to capture the connections, you will see a connection HTTPS turns on TCP 443. Then when you select a pool of offices you will see a PCoIP connection come in. It comes to 4172 TCP from the customer to the login server, then UDP 4172 also from the Client to the server connection as well as UDP 4172 in reverse. For this reverse part, the source UDP port will be 4172 and corresponds to the destination UDP port source on the incoming UDP packets. Check that this is the case. This will prove that the login server is gateway your PCoIP correctly.

    So far so good.

    Then, you switch to your remote Client to view from on the Internet. To do this, you assign the URL of the "external" ExternalIP:4172 PCoIP. Note that you don't need to restart the login server for this to take effect. It takes effect immediately. This IP address will be the public IP address which will probably through a NAT/firewall to access your connection to the server. You can start by checking that the IP address is correct using to connect to the server address when you satrt the customer to view. When you use the same IP address to the Client and through the authentication step, it will prove that it is set up correctly in terms of Routing/NAT etc. Then follow with Wireshark on the login server and observe what happens when you select a pool of virtual offices and get the black screen. You should see the same activity PCoIP on your login server model as in the case of internal test (i.e. starting with the incoming TCP connection on port 4172). View Client will use the ExternalIP address that you specified in the "URL external PCoIP ' to establish the PCoIP connection to connect to the server. So if you don't see this com 4172 TCP on the login server, or you do not see the packets UDP 4172 then something is blocking. This is usually caused by a firewall or a proxy blocking PCoIP.

    If this is the case and you do not see these packets to connect to the server, then run Wireshark on the Windows Client to view and see if you can see 4172 TCP and/or UDP sent to this ExternalIP 4172. If Yes, then you know that something (such as a firewall or proxy) between the Customer View and the view connection server it blocks.

    Let us know what it was.

    Hope it will be useful.

    Select this option.

  • I was wondering what the difference was between the powerbeats 2 and the powerbeats 3. What is this new "chip" in the powerbeats 3?

    I was wondering what the difference was between the powerbeats 2 and the powerbeats 3. What is this new "chip" in the powerbeats 3?

    Hello

    Main differences are:

    • Up to 12 hours of battery life with Powerbeats3, which use chips to W1 Apple energy-efficient (vs. up to 6 hours of battery life with Powerbeats2).
    • A quick charge of 5 minutes for a typical use of an hour (vs 15 minutes to load).
    • Improved ergonomic design.

    More information:

    http://www.Apple.com/shop/product/MNN02LL/A/powerbeats3-wireless-earphones-shock-Jaune

    http://www.beatsbydre.com/earphones/browse-earphones/wireless-earphones/ML8V2.ht ml

  • New window creates a gap between the Favorites (top) and tabs (bottom)

    19/12/14 bug Firefox began to occur:

    • When having only 1 window open and opening tabs behaves normally.
    • However, when you open a new window of the space between the bookmarks (top) and tabs (bottom) spans all windows. Its boring.

    So far only challenge is to just close and open 1 single window, or to use the module 'Classic theme restaurateur' and switch the tabs position from the bottom to the top, but all new windows will open the gap again.

    Image below.

    Unfortunately, none of these options works, so far, use 'CTR' and turn the legs up (default) allows the opening of new windows without gaps.
    Seems to be some sort of bug recently showing on CTR.

    You will need to find a way to contact the developer to let them know.

    EDIT: It seems to be resolved, seems a new version was released and the problem disappeared. Thank you very much for the help.

  • Dropbox for bookmarks or downloads of the navigation bar adds space between the navigation bar and bar bookmarks.

    When I press the button edit bookmark or download the toolbar for navigation that a line of space appears between the navigation bar and the bookmarks toolbar. This problem is corrected when I start Firefox in safe mode, but not when I boot normally and disable all addons. Please tell us how to solve this problem. Reseting Firefox and install all add ons still causes too many problems, so I hope to be able to solve this problem without reset.

    [url =http://postimg.org/image/uwr2x6x21/] [img] http://S28.postimg.org/uwr2x6x21/space.jpg line / URL

    You can also try to delete the file localstore.rdf (resets the toolbar configuration) in the case of its corrupt.

  • I can't transfer file via airdrop between the macbook pro and my iphone 6.

    Hello world

    just bought a new macbook pro 2015 and I can't transfer file via airdrop between the macbook pro and my iphone 6.

    Can someone please help me solve this problem?

    Thank you

    < re-titled by host >

    First check the steps to run the drop:

    Use AirDrop to send the contents of your Mac - Apple Support

    There are some work around to try airdrop work:

    1. Turn off Bluetooth on your Mac.
    2. Delete /Library/Preferences/com.apple.Bluetooth.plist
    3. Re-turn on Bluetooth

    You can find more info here:

    Transfer and AirDrop does not work in El Capitan

    If you do not see all of your device, it means that you are affected by the same problem, I have known, since the upgrade to OS X the air drop of Captain does not work.

  • Icon strange sudden appearance between the address bar and search engine

    A weird icon suddenly appeared between the address bar and search engine... It looks like a 'ball' for a character of cardboard. Cannot understand the source or meaning. Thank you in advance.


  • Re: What is the different between the NB550D-109 and the NB550D - 10G?

    Hello guys. I need help on the NB550D. What is the different between the NB550D-109 and the NB550D - 10G? Is just the color?

    I checked the specifications and I find no difference. Both models have the same part number, so both belong to portable computers with the same hardware configuration. Thus, the difference can be color only.

    What I see is the 109 NB550D offered in more countries than NB550D - 10G.

  • What is the difference between the Service Station and Tempro?

    Searched for information on this, but have not been able to find:

    What is the difference between the Service Station and Tempro?

    I just run the wizard upgrade Toshiba and it installed the gas station but Tempro is already installed and seems to do the same.

    Concerning

    Bushy

    Hello

    These two tools are Toshiba one informs you of the new driver updates available on the Toshiba driver page.

    AFAIK Tempro is slightly older than the gas station.
    In addition the gas station seems to provide a bit more options and features like tool Tempro.
    However, I recommend using one my favorite utility's Service Station

  • What is the difference between the HX - 90v and HX - 80 coming cameras?

    What is the difference between the HX - 90v and HX - 80 coming cameras?

    Thank you!

    I'd say it's supposed to be a fill, a little brother to the HX90v

    It removes the control ring and the GPS, and I think the rest is the same.

    It is for those who want the HX90v but the price is a bit steep for the compact range, and they need not necessarily GPS or the ring of command, just a camera that works.
    This kind of thing, at least to my knowledge.

Maybe you are looking for

  • Re: Satellite A100 battery workt for 10 minutes only

    Hey,. I have a problem. The battery of my laptop computer only workt for 10 minutes and ofter that my laptop goes to sleep, mode ofdoes anyone know how calibrate/solve this problem?

  • Pavilion sleekbook 14 b123au: b123au sleekbook 14 Hp

    PCI and missing Uknown device drivers PCI \_SB. PCI0. SPB0. XPDV DN_HAS_PROBLEM DN_DISABLEABLE DN_NT_DRIVER Hardware ID PCI\VEN_10EC & DEV_5229 & SUBSYS_1902103C & REV_01PCI\VEN_10EC & DEV_5229 & SUBSYS_1902103CPCI\VEN_10EC & DEV_5229 & CC_FF0000PCI\

  • Notification lights

    When the only phone notification. I see the different lights. What compatible applications and what colors? Is app light xperia also support this?

  • Windows media player import disc does not

    I have windows vista and I want to play DVDs with Windows Media Player.  Everytime I put a DVD in I get error importing disk stopped working.  Do you have troubleshooting for me? Suzie

  • Windows freeze/thaw when you surf the web

    Hello world I had a problem with my PC for some time now and it is really really annoying me. When you browse the web with Chrome or Firefox, it freezes for a few seconds (up to 10 at least) constantly then thaws again. If I watch a YouTube video, th