Directory Services Authentication not enabled for new accounts

Directory Services 3.0.0 is installed on our installation of Livelink and the Authentication feature is enabled, allowing users to access their Livelink account using Windows Integrated Security. However, I've noticed that at some point in the past the feature stopped being enabled when creating new accounts - all accounts created after a certain point (I haven't been able to ascertain exactly when) have blank passwords. I was under the impression that Authentication was either on or off for all accounts rather than on for some and not for others, can someone tell me how to fix this?

Find more posts tagged with

Comments

Chris_Wagg

Message from Chris Wagg <cwagg@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">eLink

Your initial impression was correct. You just turn on authentication, it does not turn on authentication pn a per user basis.

As for your users being created without passwords, that is also surprising. The only way that I can think of that this should happen would be if your were to specify that your users be created with a specified password and entered a blank password for this. But the GUI won't allow you to specify a blank password, so I don't know how this would have happened.

To correct the problem, you could run the "reset user passwords" function to update passwords for all of your synch'ed users, but you probably want to know how this happened. If it is still happening, I would generate a set of logs showing a synch adding a user with no password and sending them in to support as a new ticket. Connect logs would be essential so follow the instructions in the attached document to turn on the logging.

---------------------------------------
Chris Wagg
Principal Product Specialist
Escalations Support Team
Open Text Corporation
Ph: 800-540-7292
---------------------------------------

From: eLink Discussion: Livelink Directory Services Discussion [mailto:directoryservices@elinkkc.opentext.com]
Sent: Friday, March 20, 2009 10:49 AM
To: eLink Recipient
Subject: Directory Services Authentication not enabled for new accounts

Directory Services Authentication not enabled for new accounts

Posted by natsadmin (Administrator, NATS) on 2009/03/20 10:47

Directory Services 3.0.0 is installed on our installation of Livelink and the Authentication feature is enabled, allowing users to access their Livelink account using Windows Integrated Security. However, I've noticed that at some point in the past the feature stopped being enabled when creating new accounts - all accounts created after a certain point (I haven't been able to ascertain exactly when) have blank passwords.

I was under the impression that Authentication was either on or off for all accounts rather than on for some and not for others, can someone tell me how to fix this?

NATS_Support

Hi ChrisI've attached a screenshot of the page used to create users through the GUI. Unless I'm misunderstanding your post we are indeed specifying a blank password! the page contains fields for password information which we leave blank (we were under the impression that they were to be ignored as Directory Services will handle authentication). Should we not even be seeing these password fields?It is indeed still happenning - I created three accounts earlier today which don't appear to be under Directory Services Authentication.You mention generating a set of logs, how would I go about this?

NATS_Support

Just tried the 'reset user passwords' option, it doesn't seem to have made any difference. You can see the difference between older accounts and newer ones on the system by finding a user and choosing the edit option - older accounts have blue text stating Directory Services Authentication feature is active and has disabled Password functionality for users.Whereas newere accounts show fields for editting password. I will open a ticket for this...

Chris_Wagg

Message from Chris Wagg <cwagg@opentext.com> via eLink

eLink

I would ask that you open a ticket on this issue as I am out of the office for the rest of the day. Before doing so, I would turn on logging following the instructions I sent in my previous post

Chris
Sent From My Blackberry
---------------------------------------
Chris Wagg
Principal Product Specialist
Escalations Support Team
Open Text Corporation
Ph: 800-540-7292
---------------------------------------

From: eLink Discussion: Livelink Directory Services Discussion <directoryservices@elinkkc.opentext.com>
To: eLink Recipient <devnull@elinkkc.opentext.com>
Sent: Fri Mar 20 13:35:18 2009
Subject: Reset didn't work

Reset didn't work		Posted by natsadmin (Administrator, NATS) on 2009/03/20 13:30
In reply to: RE Directory Services Authentication not enabled for new accounts		Posted by cwagg (Wagg, Chris) on 2009/03/20 11:36

Just tried the 'reset user passwords' option, it doesn't seem to have made any difference. You can see the difference between older accounts and newer ones on the system by finding a user and choosing the edit option - older accounts have blue text stating

Directory Services Authentication feature is active and
has disabled Password functionality for users.

Whereas newere accounts show fields for editting password. I will open a ticket for this...

Appu_Nair

The Blue things is what I am used to and usually is the result of this key under security in opentext.ini[Security]HidePasswords=trueThis key I am told works in this way.If you change a userid in AD and you change it in livelink then you do not have to "reset passwords".(No syncing just SSO used in this case)Maybe new dir svcs don't need this.I would check all youreserver opentext.ini's and see if some have them and some don't