Combination View Flat View Tree View
Threads [ Previous | Next ]
toggle
Joseph John
Is it possible to change the LDAP user password through LR
March 20, 2014 6:46 AM
Answer

Joseph John

Rank: Junior Member

Posts: 75

Join Date: July 25, 2011

Recent Posts

Hi All,
I am using LR CE 6.1.1, integerated with OpenDJ, ldap .
My liferay ldap setting as showin in the attachment.
I am able to login as LDAP user,but not able to change LDAP password.
I am not getting any error in liferay logs or in openDJ logs, but LR password option throws message, you cannot change the password
help and advice requested.
Thanks
Joseph John
Attachment

Attachment

Attachment

Attachments: LDAP-Setting2.png (39.0k), LDAPSettings.png (34.1k), LdapSettings3.png (46.0k)
Nagaraj Bayanna
RE: Is it possible to change the LDAP user password through LR
March 22, 2014 11:04 AM
Answer

Nagaraj Bayanna

Rank: New Member

Posts: 12

Join Date: September 28, 2011

Recent Posts

please check either your ldap has password read/write privileges or not, to update the password on LDAP write privileges are mandatory.

Nags
Joseph John
RE: Is it possible to change the LDAP user password through LR
March 22, 2014 10:43 PM
Answer

Joseph John

Rank: Junior Member

Posts: 75

Join Date: July 25, 2011

Recent Posts

Hi Nags,
I checked the password read write options, it has password read write options
But by default I think by default LR is not able to change password through LDAP, after the above settings
thanks
Joseph John
Christoph Rabel
RE: Is it possible to change the LDAP user password through LR
March 24, 2014 9:03 AM
Answer

Christoph Rabel

Rank: Regular Member

Posts: 106

Join Date: September 24, 2009

Recent Posts

OpenDJ doesn't allow preencrypted passwords. You have two options:

1) Add this line to portal-ext and restart:
ldap.auth.password.encryption.algorithm=

+: OpenDJ encrypts the password as it sees fit, which is the recommended configuration
-: If you use ldap, not ldaps, the password is sent plain text to the ldap server.

2) Configure OpenDJ to allow preencrypted passwords:
http://marginnotes2.wordpress.com/2011/07/21/opendj-using-pre-encoded-passwords/

Add this line to portal-ext and restart:
ldap.auth.password.encryption.algorithm=SSHA

-: This is basically disabling a security feature and disables opendj build-in password policies.
+: Even with ldap protocol password is transmitted encrypted.

hth
Joseph John
RE: Is it possible to change the LDAP user password through LR
April 1, 2014 5:11 AM
Answer

Joseph John

Rank: Junior Member

Posts: 75

Join Date: July 25, 2011

Recent Posts

Thanks Christoph,
thanks for the advice, I will try it out and post the result back to the forum
Your advice is appreciated
thanks
Joseph John