Changing Passwords

Lotus users have two different passwords:

• HttpPassword, which is the password that allows a user to access a Notes server from a web browser or other HTTP client.

• ID file, which is the password that encrypts the user’s Notes ID file. This password cannot be changed unless the current password is specified. As a result, an Identity Manageradministrator cannot change this password.

  See ID File for additional information.

The adapter can be configured to manage one or both of these passwords.

Managing HttpPasswords Only

Configure the Domino Gateway adapter as follows to manage HttpPasswords but not ID file passwords.

• Set the User Provides Password On Change resource parameter to 0.

• In the schema map, change the password Resource User Attribute to HTTPPassword.

• Delete the HTTPPassword Identity System User Attribute from the schema map.

Managing HttpPasswords and ID File Passwords

Configure the Domino Gateway adapter as follows to manage ID file passwords from the User interface and HttpPasswords from the Administrator and User interfaces.

• Set the User Provides Password On Change resource parameter to 0.

• The ID file password cannot be changed unless the user specifies the current password. The current password must be defined in the schema map as an account attribute named WS_USER_PASSWORD. Make sure this attribute is present and its data type is encrypted.

• In the schema map, change the HTTPPassword Resource User Attribute to password. As a result of this change, the password Resource User Attribute will map to password as well as HTTPassword.

• Add the Password and LoginChange views to the WS_USER_PASSWORD AccountAttribute. Use the [Please define the IDMIDELong text entity] or debug pages to edit the resource definition as follows:

  <AccountAttributeType id=’66’ name=’WS_USER_PASSWORD’ syntax=’encrypted’ 
    mapName=’WS_USER_PASSWORD’ mapType=’string’>
     <Views>
        <String>Password</String>
        <String>LoginChange</String>
     </Views>
  </AccountAttributeType>

• Add the WS_USER_PASSWORD and idFile fields to the following forms:

  • Change My Password Form

  • Change Password Form

  • Expired Login Form

    These fields must be must be defined to point to the resourceAccounts view.

    <Field name=’resourceAccounts.currentResourceAccounts[ResourceName].
    attributes.idFile’>
       <Display class=’Text’>
          <Property name=’title’ value=’idfile’/>
       </Display>
    </Field>
    <Field name=’resourceAccounts.currentResourceAccounts[ResourceName].
    attributes.WS_USER_PASSWORD’>
       <Display class=’Text’>
          <Property name=’title’ value=’WS_USER_PASSWORD’/>
       </Display>
    </Field>

Managing ID File Passwords Only

Configure the Domino Gateway adapter as follows to manage ID file passwords from the User interface without managing HttpPasswords.

• Set the User Provides Password On Change resource parameter to 1.

• The ID file password cannot be changed unless the user specifies the current password. The current password must be defined in the schema map as an account attribute named WS_USER_PASSWORD. Make sure this attribute is present and its data type is encrypted.

• Add the idFile field to the following forms:

  • Change My Password Form

  • Change Password Form

  • Expired Login Form

    This field must be must be defined to point to the resourceAccounts view.

    <Field name=’resourceAccounts.currentResourceAccounts[ResourceName].
    attributes.idFile’>
       <Display class=’Text’>
          <Property name=’title’ value=’idfile’/>
       </Display>
    </Field>