plexer Posted February 17, 2008 Author Posted February 17, 2008 rvdmast: well spotted I did look through the code the other week. I presume using objUser.SetPassword ("NewPassword") would be trying to set the password to the value NewPassword. Ben
boomam Posted February 18, 2008 Posted February 18, 2008 On a bright note about this program, as i havnt tested it for sure as there are other problems im seeing too atm, it looks like SSPR can be used to reset Frogserver VLE passwords also, in a roundabout way....
Irazmus Posted February 22, 2008 Posted February 22, 2008 @rvdmast: Very well spotteed and wholly correct, those quotes shouldn't be there. Looks like I still have some more proof reading to do ^^; @kerrymoralee9280: Does that happen for all users or just specific ones? And what format of usernames are you using?
6Foot2 Posted February 26, 2008 Posted February 26, 2008 I have been asked to look into password recovery for Facility ePortal. I think the idea is that when staff have forgotten their password for ePortal could use a 'Self Service Password' to get logged on with minimal Network Support staff intervention. Could we use Self Service Password to do this or is there another answer? Is anyone doing something similar but in another way? Ideas please. Thanks.
plexer Posted February 26, 2008 Author Posted February 26, 2008 DaveP: we don't use facility eportal so no idea at the moment. How and where are users passwords stored in eportal? Ben
6Foot2 Posted February 26, 2008 Posted February 26, 2008 DaveP: we don't use facility eportal so no idea at the moment. How and where are users passwords stored in eportal? Ben Storage is in a database [i think] Where? I am not sure. I will have a look....
plexer Posted February 26, 2008 Author Posted February 26, 2008 If it's possible to access this database using iis/asp then it's possible that a new version could be written to reset those details or an extension written to SSPR to facilitate this. Ben
burgemaster Posted May 11, 2008 Posted May 11, 2008 Storage is in a database [i think] Where? I am not sure. I will have a look.... Have you thought about letting staff login automatically to eportal with the AD account? Its possible, looking to set it up V soon
Edu-IT Posted May 11, 2008 Posted May 11, 2008 Have you thought about letting staff login automatically to eportal with the AD account? Its possible, looking to set it up V soon The problem with that is that it's possible for people to gain access to personal information who shouldn't necessarily have that kind of access when staff leave their computers logged in. I've not used eportal myself so I don't know exactly what staff can and can't do through eportal though so I could be wrong.
6Foot2 Posted May 12, 2008 Posted May 12, 2008 Have you thought about letting staff login automatically to eportal with the AD account? Its possible, looking to set it up V soon We are now looking at a solution SERCO wrote for the NHS. Here if the user has forgotten the password they can click a link and the details are sent out to the E-Mail account that is stored on ePortal for that member of staff [if you get my drift: It is rather early in the morning]
plexer Posted July 17, 2008 Author Posted July 17, 2008 Just to let people know that SSPR is now available via google code: sspr - Google Code Ben
boomam Posted October 3, 2008 Posted October 3, 2008 Hi. Im having problems with this program here. On our last network, it worked flawlessly. But on the new'en, it says its changed a password, even though it hasnt? Anyone got any ideas?
plexer Posted October 3, 2008 Author Posted October 3, 2008 I presume the accounts in question don't have "user cannot change password" set? A bit more info on your new setup would be good too. Thanks, Ben
boomam Posted October 3, 2008 Posted October 3, 2008 (edited) I presume the accounts in question don't have "user cannot change password" set? A bit more info on your new setup would be good too. Thanks, Ben Its happening globally, to both the new users, and existing ones, and all of them are set so they can change passwords. Old setup was one DC doing everything, SSPR on that. New setup is 2xDCs, with, iirc, SSPR on one of them. Just noticed something, as i wasnt the one who setup SSPR, it has to be on a AD server to work fully doesnt it? As ive noticed that its on our IIS... Just installing AD-DS on it now, without global cataglogs & DNS, just so its a very basic DC. Edited October 3, 2008 by boomam
plexer Posted October 3, 2008 Author Posted October 3, 2008 One of the requirements for the program in the readme is AD but I'm not sure if that means it needs to be installed on a DC but that would make sense. I have it installed on a DC here and if you had installed on a DC and working at the last place and it's not on a DC at the new place and doesn't work then sounds like a plan to me. Ben
boomam Posted October 3, 2008 Posted October 3, 2008 One of the requirements for the program in the readme is AD but I'm not sure if that means it needs to be installed on a DC but that would make sense. I have it installed on a DC here and if you had installed on a DC and working at the last place and it's not on a DC at the new place and doesn't work then sounds like a plan to me. Ben Right, ive got it AD installed on our IIS now, basic, no DNS/DHCP/Global Catalogue on it, just the AD. However when i select the list of domain controllers, it lists: AD01 - DCType=GC - Online. AD02 - DCType=GC - Online. IIS - DCType=DC - Online. IIS - DCTyle=GC - Unavailable. Why is the IIS listed twice? Is it because its only a DC with no global catalogue, so it lists the GC version as unavailable? If i use a 2k3 MMC to see what DCs there are, it just lists AD01, AD02 & IIS.
Irazmus Posted October 3, 2008 Posted October 3, 2008 Which version of SSPR are you running? Up to version 2.1 SSPR needed to be run on a DC, from 2.2 onwards this limitation was removed and SSPR will run on a member server.
boomam Posted October 3, 2008 Posted October 3, 2008 Which version of SSPR are you running? Up to version 2.1 SSPR needed to be run on a DC, from 2.2 onwards this limitation was removed and SSPR will run on a member server. Not sure which version, how do i tell? Ive removed the AD off IIS, and put it back on with a full DNS & Global catalogue, but its still listing it twice? Once with its actual name, and once with its old name that it originally had for about a week? Ideas on that? It'll be sometime before i know if this change has made much difference to SSPR.
Irazmus Posted October 3, 2008 Posted October 3, 2008 Not sure which version, how do i tell? The version number should be listed in the readme file. Alternatively, if your copy includes LoginAdmin.dll and cred.ini then you have 2.2 or 2.2.1, if not you're likely using 2.0 or 2.1. Ive removed the AD off IIS, and put it back on with a full DNS & Global catalogue, but its still listing it twice? Once with its actual name, and once with its old name that it originally had for about a week? Ideas on that? None spring to mind right now, but others know AD much better than I do.
boomam Posted October 3, 2008 Posted October 3, 2008 (edited) The version number should be listed in the readme file. Alternatively, if your copy includes LoginAdmin.dll and cred.ini then you have 2.2 or 2.2.1, if not you're likely using 2.0 or 2.1. Its got the loginadmin.dll. On a side note, adding AD to the IIS still doesnt fix the problem. . Its odd, because it says it has reset the password, but it doesnt reset. If i do the same change in AD, the password changes instantly? Edited October 3, 2008 by boomam
Irazmus Posted October 3, 2008 Posted October 3, 2008 In that case I'd check the credentials in cred.ini (and the user's AD rights). If they check out, unregister and reregister LoginAdmin.dll regsvr32.exe /u C:\Inetpub\LoginAdmin.dll regsvr32.exe C:\Inetpub\LoginAdmin.dll If that still doesn't solve it, we'll have to do some more digging.
boomam Posted October 3, 2008 Posted October 3, 2008 In that case I'd check the credentials in cred.ini (and the user's AD rights). If they check out, unregister and reregister LoginAdmin.dll regsvr32.exe /u C:\Inetpub\LoginAdmin.dll regsvr32.exe C:\Inetpub\LoginAdmin.dll If that still doesn't solve it, we'll have to do some more digging. Ive unregistered and reregistered the dll, and ive removed AD/GC/DNS from the IIS as it doesnt need it anymore. Just waiting for it to restart and we'll see how it goes...
Kevin_Beaumont Posted December 1, 2008 Posted December 1, 2008 When I log in as a test account and register for the service, it appears to register fine but when I look at the database the 'username' field is empty. Any ideas anyone? Folks, has anybody else seen this one? I've got the same problem. I can register, I can update, but I can't reset (says the username isn't found) or get in the admin directory: "error '80005000' /admin/auth.asp, line 35" From what I can see it can't determine the CurrentUser, not sure why... Obviously, it isn't much use without the admin interface or the reset directory working Cheers!
rvdmast Posted December 1, 2008 Posted December 1, 2008 error 80005000 usually indicates an invalid path. Which to me suggests that there is something wrong with your FQDN variable (in line 35). Did you modify the FQDN= line in config.asp to reflect your domain name? Are you sure it's correct?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now