[prev in list] [next in list] [prev in thread] [next in thread] 

List:       forgerock-opendj
Subject:    [Opendj] How can we let the old password does not work?
From:       ludovic.poitou () forgerock ! com (Ludovic Poitou)
Date:       2012-09-24 4:27:34
Message-ID: 2473AF3672F840DEB5C872FAE3F47179 () forgerock ! com
[Download RAW message or body]

As far as I know, once a user password is changed in OpenDJ, there is no way to \
authenticate with the old password.    So, this suggest that there could be some \
client side caching. I'm not familiar enough with Spring ldap to help.  

Regards

Ludovic
--  
Ludovic Poitou
ForgeRock France - http://www.forgerock.com
ludovic.poitou at forgerock.com
http://ludopoitou.wordpress.com


On Monday 24 September 2012 at 05:02, batizhao wrote:

> I use the spring ldap operating OpenDJ, I need to modify the user's password, like \
> below so: ?
> 
> Code 1:
> ----
> Attribute newPasswordAttribute = new BasicAttribute( "userPassword", \
> user.getUserPassword()); 
> ModificationItem replacedPassword = new \
> ModificationItem(DirContext.REPLACE_ATTRIBUTE, newPasswordAttribute); 
> ldapTemplate.modifyAttributes(dn, new ModificationItem[]{replacedPassword});
> 
> Code 2:
> ----
> 
> DirContextOperations context = ldapTemplate.lookupContext(dn);
> 
> Attribute oldPasswordAttribute = new BasicAttribute( "userPassword", \
> context.getObjectAttribute("userPassword")); Attribute newPasswordAttribute = new \
> BasicAttribute( "userPassword", user.getUserPassword()); 
> ModificationItem oldPassword = new ModificationItem(DirContext.REMOVE_ATTRIBUTE, \
> oldPasswordAttribute); ModificationItem newPassword = new \
> ModificationItem(DirContext.ADD_ATTRIBUTE, newPasswordAttribute); 
> ldapTemplate.modifyAttributes(dn, new ModificationItem[]{oldPassword,newPassword});
> 
> My Question: Both of these methods can modify the password property. However, I \
> found the old password can still be used. How can we let the old password does not \
> work? 
> _______________________________________________
> OpenDJ mailing list
> OpenDJ at forgerock.org
> https://lists.forgerock.org/mailman/listinfo/opendj
> 
> 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.forgerock.org/pipermail/opendj/attachments/20120924/ce0728dd/attachment.html \



[prev in list] [next in list] [prev in thread] [next in thread]