Focal Point
[CLOSED] Password Recovery

This topic can be found at:
https://forums.informationbuilders.com/eve/forums/a/tpc/f/7971057331/m/208104015

August 17, 2010, 11:16 AM
Dan Pinault
[CLOSED] Password Recovery
Does anyone out there know if v8 will contain a password recovery tool for the end user?

We currently use Active Directory for our user accounts and we are considering a move to ADAM. Between now and v8 can anyone recommend a password management utility?

Thanks!

Dan

This message has been edited. Last edited by: Dan Pinault,


7.7.05M/7.7.03 HF6 on Windows Server 2003 SP2 output to whatever is required.
August 24, 2010, 08:30 AM
dlogan
Dan,
I'm not sure if I'm clear on what you're looking for. Are you looking for a way for an end user within WebFOCUS to reset their own Active Directory password, a way for WebFOCUS to reset their own internal WebFOCUS password, or more generically a way for a user to change their password when they know their old password?

The last one is already in the product. I do not know of any plans for 8.0 of either of the first two, and I can see some pretty large security problems with WebFOCUS resetting passwords within AD.

Having the ability built into WebFOCUS which allows password recovery for any WebFOCUS managed passwords seems realistic as long as the feature can be enabled or disabled. As a result if this is something you'd like, I'd suggest you open up a case with TechSupport and request a New Feature Request.

If you wanted to tackle this feature before the NFR could be implemented this sounds like a relatively simple task to accomplish with the WebFOCUS API.


WF 71.x, 76.x, 7701, 8.0 Beta OS: Linux, Win2k3, Win2k, Win2k8, WinXP


August 27, 2010, 02:08 PM
Dan Pinault
dlogan,

Active Directory is where our users are authenticated so I certainly don't want WF interacting with it. Based on the little bit of preview I have seen of v8 I got the impression that Authentication and Authorization would (or could) come from the same repository. I suppose it only makes sense for WebFOCUS to be able to manage passwords in it's own repository. It would be crazy to expect it to do that in some third party repository.

Supposing I configure v8 so users are kept in the WebFOCUS repository. Will there be a self-service password recovery tool or just a method for changing a known password?

Supposing I want to continue using Active Directory what sort of self-service, web-based password utility are people using that they can recommend? There sure seems to be a lot of them out there! I just did a search for web-based self-service password recovery and was inundated by search results.

Thanks!

Dan


7.7.05M/7.7.03 HF6 on Windows Server 2003 SP2 output to whatever is required.
September 02, 2010, 03:37 PM
dlogan
WebFOCUS 8.0 will allow you to change your password when you know your old password.

I do not know of any plans to add "Password recovery" feature to the product.

However, if this is something you'd like, submit a new feature request and it can be kept under consideration.

As far as AD password recovery products are concerned, I don't have any experience with any of them to recommend.

At one of my last jobs I helped designed an internal password recovery system that was going to be developed, but it was something that was going to be made internally.


WF 71.x, 76.x, 7701, 8.0 Beta OS: Linux, Win2k3, Win2k, Win2k8, WinXP