Skip to main content

developerWorks >  Tivoli  >  Forums  >  Security Management  >  developerWorks

notifyFlag on changePassword extension in ITIM    Point your RSS reader here for a feed of the latest messages in this thread


     

 
 

My developerWorks
 Welcome, Guest
Sign in or register
Permlink Replies: 3 - Pages: 1 - Last Post: Nov 10, 2009 4:57 PM Last Post By: seerozha
seerozha

Posts: 8
Registered: Oct 13, 2009 06:59:02 PM
notifyFlag on changePassword extension in ITIM
Posted: Oct 21, 2009 04:44:38 PM
Click to report abuse...   Click to reply to this thread Reply
Can ITIM UI be configured to pass notifyFlag="false" to the passwordChange operation? The default is "true".

The notifyFlag parameter is used by ITIM to specify whether the account owner should be notified after a successful password change. When the password change template is disabled in ITIM 5.1 however, the notifyFlag is still getting passed as "true" by the ITIM UI, so is there a configuration property somewhere that would make ITIM pass notifyFlag="false" whenever a user password is changed via the ITIM console?

I have already tried searching this forum, itim docs and google.

Thanks!

yn2000

Posts: 436
Registered: Aug 03, 2005 04:28:21 PM
Re: notifyFlag on changePassword extension in ITIM
Posted: Oct 22, 2009 08:10:04 PM   in response to: seerozha in response to: seerozha's post
Click to report abuse...   Click to reply to this thread Reply
Are you telling us that password change template does not work and email notification is still being sent to the end user, even though you already set the password change template to disable? If that is so, then open a PMR.
Or... if you just want notifyFlag='false' for your own custom thingy, then you might want to try setting it in the Operational Workflow.
Rgds. YN.
seerozha

Posts: 8
Registered: Oct 13, 2009 06:59:02 PM
Re: notifyFlag on changePassword extension in ITIM
Posted: Nov 10, 2009 02:32:52 PM   in response to: yn2000 in response to: yn2000's post
Click to report abuse...   Click to reply to this thread Reply
Here's the scenario...

We have a custom jsp page to reset forgotten passwords. It
1. Validates challenge response question
2. Calls password reset via ITIM API with notifyFlag set to true.
3. An email is sent with a temporary password back to user (the email is sent from custom password change workflow)

A user may also change his or her own password using self service. In this case an email should not be sent.

So, in the custom password change operation we'd like to know whether this workflow was kicked off by self service pw change or by custom jsp (forgotten password). The ideal way would be to use notifyFlag.

This would require:
1. Configure ITIM so that notifyFlag is passed as "false" when I change my own password
2. Send notifyFlag "true" during forgotten password change API call

We have figured out how to do 2, but 1 is the question I've posted to this board. To answer your questions:

  • We can certainly change notifyFlag to true or false in workflow, but it's too late at this point. The whole point is to use it as an identifier (was this operational workflow kicked off by ITIM or by custom jsp).
  • The password change template seems to use some other mechanism to turn notifications on/off. The default emails on password change have stopeed, but ITIM is still passing notifyFlag as "true" to the custom password change workflow.

If the notifyFlag is an input parameter to the password change workflow, there has to be some way to configure what ITIM passes to it when a user changes his own password via ITIM Admin Console or ITIM Self Service...
seerozha

Posts: 8
Registered: Oct 13, 2009 06:59:02 PM
Re: notifyFlag on changePassword extension in ITIM
Posted: Nov 10, 2009 04:57:31 PM   in response to: seerozha in response to: seerozha's post
Click to report abuse...   Click to reply to this thread Reply
To answer my own question, in case someone else is interested:

  • notifyFlag is by default "false" when using ITIM Console to change password for self
  • notifyFlag is by default "true" when using ITIM Console to change password for someone else

Point your RSS reader here for a feed of the latest messages in all forums