Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Disable enhanced protection for Secret Store

21 views
Skip to first unread message

ByronBWright

unread,
Oct 8, 2008, 4:56:05 PM10/8/08
to

We have an implementation of Virtual Office that is used by students and
staff. If the user password is reset by an administrator through either
ConsoleOne or iManager then the user gets prompted to delete the secret
store on next logon.

This functionality appears to be a result of the secret store using
enhanced protection where it differentiates between administrator reset
of passwords and user password changes. I'd like to disable this
functionality of virtual office specifically or potentially the system
as a whole.

Some Secret Store documentation indicates that an SSO application
object can be configured to enable or disable enhanced protection.
However, I can find no such object for Virtual Office. Nor is any
configuration file obvious to be changed.

My workaround may be "TID10092130 Popout window prompts to delete the
secret store on login after password change". However, I'd prefer to
disable this functionality rather than just remove the error message as
this TID describes.


--
ByronBWright
------------------------------------------------------------------------
ByronBWright's Profile: http://forums.novell.com/member.php?userid=12383
View this thread: http://forums.novell.com/showthread.php?t=346557

ByronBWright

unread,
Oct 17, 2008, 1:16:02 PM10/17/08
to

As an update, I've implemented TID 10092130 with the following
modifications for virtual office on an OES1 server.

The file to be modified is:
/var/opt/novell/tomcat4/webapps/vo/portal/gadgets/com.novell.vo.authentication.Authenticator/skins/default/devices/default/main.xsl

An example of commenting out the line:

//commented out by Byron to remove SecretStore Popup
//Based on TID 10092130
//errors will still appear in log files
//
javascript:popout(ssurl+gadID,"SSManage",500,550,null);

This is done on about line 224 of the file.

Our users are no longer prompted to clear the secret store when their
password is reset. Effectively the secretstore is now disabled.

0 new messages