Change Password Master iView 

Technical Data

Type of application

Master iView

Technical name

SelfRegistration.ChangePassword

Available from Portal (release)

EP 5.0 SP3

Data origin

Corporate LDAP directory connected to the Enterprise Portal

Support

EP-PIN-USM

 

Range of Functions

This master iView can be integrated in a role and allows users to change their password on the corporate LDAP directory. Its source code is shipped with the Enterprise Portal so that customers can extend it to suit their individual requirements. For example, the iView can be extended to allow users to change other user data, such as their address, in addition to their password.

You can find the source code at <http/https>://<portal_server>/irj/docs/usermanagement/index.html by choosing the iView samples link.

Integration

This iView allows users to change their password (or other of their personal data) on the corporate LDAP directory. It connects (binds) to the corporate LDAP directory that the administrator defined in the user management configuration using the user ID and password of the user who is requesting to change his or her password (or other of his or her personal data).

Prerequisites

·       As the iView connects (binds) to the corporate LDAP directory with the user ID and password of the user currently logged on, all users allowed to use this iView must have read and write access to their personal user data on the LDAP directory server. You must configure this on the directory server.

In Novell eDirectory, you can assign these rights by right-clicking on a user, choosing Properties, choosing Restrictions > Password restrictions and checking Allow user to change password.

·       We recommend that you set up an SSL connection between the Portal Server and your corporate LDAP directory, as confidential information such as passwords are passed across this connection.

If you are using Microsoft Active Directory Server as your corporate LDAP directory, you must set up an SSL connection between the Portal Server and the corporate directory in order to use the Change Password iView.

·       If you are using Novell eDirectory as your corporate LDAP directory, you must import the Novell LDAP SDK called LDAP Classes for Java - NetWare and Windows into your portal. You can download this from Novell’s web site. For details, see SAP Note 536324.  After downloading the SDK, copy or move the downloaded file ldap.jar to the following portal directory:
<deploy>irj\WEB-INF\plugins\portal\resources\SelfRegistration\lib
Then restart the Java servlet engine.

Settings

Parameter

Description

Example

Obligatory/Optional

password_allowed_retries

Number of times user can try to reenter his or her correct password.

5

Obligatory

password_max_length

Maximum length of password

8

Obligatory

password_min_length

Minimum length of password

6

Obligatory

security_provider

Security provider. Do not change the default value unless you specifically wish to use a different security provider.

com.sun.net.ssl.internal.ssl.Provider

Obligatory

ssl_socket_factory

SSL socket factory used by the iView. The value depends on the Java servlet engine that your portal uses.

Macromedia JRun: javax.net.ssl.SSLSocketFactory

SAP J2EE Engine: com.sap.security.ssl.SSLSocketFactory

javax.net.ssl.SSLSocketFactory

Obligatory