LDAP and Portal UME password change

[Former Member]

We are using NW04s Portal 7.0 SP08 and a corporate LDAP for the user store. When a user logs into the Portal with their network ID and password the portal successfully authenticates against LDAP and logs them in with no issues.

However, we want people to be able to change their password from within the portal using the standard webdynpro (twice) and submit the request, they get an error: "an error occurred in the persistence; contact your system administrator."

Per several OSS notes, we have ensured the following:

- The Every User Core Role has UME.Manage_My_Password = YES

- The user management property ume.logon.security_policy.password_change_password_allowed = TRUE

- LDAP connection user has create/change authorization for all branches of LDAP

- The data source configuration file contains the following parameters:

ume.ldap.access.pwd.via.usercontext = TRUE and ume.ldap.access.set_pwd = TRUE

From what we can tell, this should be working. Can you provide any additional information?

[MarcelRabe]

Hi Margie

the last two parameters are parameters of the com.sap.security.core.ume.service, not the datasource configuration file as far as i know.

Did you check the datasource configuration file in the following section:

<dataSource id="CORP_LDAP"

className="com.sap.security.core.persistence.datasource.imp.LDAPPersistence"

isReadonly="<b>false</b>"

isPrimary="true">

rgds

Marcel Rabe

[Former Member]

Hi Margie,

In case that you use Microsot Active Directory server you have to configure UME to connect via SSL to it, otherwise MS LDAP does not allow password change over unsecure channel.

Best regards,

Iliyan

[former_member591584]

We are having a similar problem, however we ARE able to change the Active Directory password, from the portal/ume. Thats the good news.

The bad news is that when the password expires in Active Directory the UME does not recognize that the user just changed it (when logging on to the network.) So the portal then prompts the user to 'change password' even though it was just changed (in Active Directory). The user gets confused, and changes it a 2nd time from the portal, and now thier Active Directory/Network password is changed (again). This cant be how it is supposed to work.......

Any suggestions?

Thanks.

Message was edited by:

scott mcleod