Changing HTTP Passwords
V. K. Norman
We are going to set up several users via Domino, basically just for mail
access. The initial passwordds are entered into the Person Docs in the NAB
by the Administrators, but after that the users are going to need to change
them, and I cannot see a way to do it. Anyone encountered this before?
TIA,
V. K. Norman,
Notes Administrator,
Circuit CIty Stores, Inc.
Stuart
Hi,
Basically there is no inbuilt way to do this. In the end I had to write
code using the $$QuerySaveAgent field to change a HTTP password.
I posted a similar question a few weeks ago and got a very good response
from "Wolverine" <wolv...@easynet.co.uk>. I have quoted that below.
-----------------------------------------------------------------
"Wolverine" <wolv...@easynet.co.uk> wrote:
You will probably need to set up a special page for them to do this.
What
they would need to have is a page thet forces a login (using the &Login
argument at the end of the URL - This only works if they have not
already
logged into the system). The form will need at least five fields:
1 - Remote User
2 - Old Password
3 - New Password
4 - Confirm Password
5 - $$QuerySaveAgent
The $$ field will perform a number of checking tasks. I wont write this
out
in full (i dont have time to do it and test it sorry )but I'll give you
some pointers.
Considerations
1. The users must have at least author access to their own personal
documents (you can do this by setting there Net name to the author names
field on the form.
2. Set field one equal to the field name REMOTE_USER, this will give you
the web logon name for you to compare with the name in the NAB
3. Use the documentcontext property to grab any info from the doc
Dim sess as new notessession
Dim doc as notes document
set doc=sess.documentcontext ' sets the current web doc to be
accessible
as a backend notesdoc class
usrname=doc.remote_user(0) - the (0) is because notes stores field
values
in an single dimensional array
4. The $$QuerySave Agent will have to perform the following tasks (in
this
logical order)
Set up all the variables
check the new and confirm password are the same
Store the REMOTE_USER in a string variable
Open the public NAB
Search the DB for the name (use the search method for notesdatabase)
Get the current encrypted HTTP password as a string
Compare the encrypted new password (use the evaluate and @password
command
on the returned string from the NEw PAssword field)
If they match change to the new password (dont forget encrypt it first)
Save the document
Print a message saying password changed
Because of the way encryption work passing the same string through the
@Password function produces the same result. i.e. LotusNotes always
produces (0E1264F5DE0D2922620A488AA4A91371)
-----------------------------------------------------------------
Good Luck
Stu
Luca Regoli
The title says it all: I'm unable to get CGI info (the IP address or
username other infos)from the Domino.Action Home page (but it's the same
for other pages) so the following gets an empty string
....
> Dim sess as new notessession
> Dim doc as notes document
> set doc=sess.documentcontext
> userAddr=doc.remote_addr(0)
doc.remote_addr(0)rsturns always "" even if THERE DO IS a field with that
name in the HomePage form used to show the homepage.
I was able to run the script, get a count of the people reading, but it's
impossible to grab infos about who's visiting the web.
BTW the same LS procedure muted from the COUNTER one, DO WORKS with other
database other than those created w/Domino.Action.
Please help me I need to set-up a statistic about accesses and don't want
to use Domino.Log but to do a specific script to collect only what I need.
Thanks a lot in advance.
Dr. Martin Neumann
> Hi,
I have a question concerning the access rights for changing the
http-password :
"Wolverine" <wolv...@easynet.co.uk> wrote:
> 1. The users must have at least author access to their own personal
> documents (you can do this by setting there Net name to the author
> names
> field on the form.
>
does that mean, that the user must have author access to the public NAB
?
that would be the kill criteria for domino at Bayer I suppose, because
our central IT-department would never grant this author access on the
NAB.
martin.ne...@bayer-ag.de
scientific information and documentation
Danny Lawrence
"Dr. Martin Neumann" <martin.ne...@bayer-ag.de> wrote:
>> Hi,
>I have a question concerning the access rights for changing the
>http-password :
>"Wolverine" <wolv...@easynet.co.uk> wrote:
>> 1. The users must have at least author access to their own personal
>> documents (you can do this by setting there Net name to the author
>> names
>> field on the form.
>>
>does that mean, that the user must have author access to the public NAB
>?
>that would be the kill criteria for domino at Bayer I suppose, because
>our central IT-department would never grant this author access on the
>NAB.
Move all of the "HTTP only" users to another N&A Book and either
cascade them or use a Master NAB
--Danny Lawrence, Tiassa Technologies Inc.
Lotus Notes Configuration, Development and Management
Tiassa @ ix.Netcom.Com (Remove the SPAMMUSTGO)
"Tiassa Dreams and plots are born" --Steven Brust