Active sync with Active Directory. activeSync.password

AD - OS - Win2k3

IDM -6.0SP1

I am using active sync with Active Directory.

Form for Active Sync make with Wizard Active Sync.

Make user in AD with correct password.Excecute StartActiveSync.

User not make in Lighthouse.

In log file appears the following:

<WavesetResult>

<ResultItem type='error' status='error'>

<ResultError throwable='com.waveset.exception.PolicyViolation'>

<Message id='PL_POLICY_VIOLATION_HEADER'>

<String>password</String>

<String>Lighthouse User</String>

</Message>

<Message id='PL_STRING_MIN_CHARACTERS'>

<String>4</String>

</Message>

<StackTrace>com.waveset.exception.PolicyViolation: Policy Violation (password on Lighthouse User):

Must contain at least 4 valid characters.

at com.waveset.policy.StringQualityPolicy.check(StringQualityPolicy.java:1090)

at com.waveset.provision.PolicyProcessor.checkPolicy(PolicyProcessor.java:716)

at com.waveset.provision.PolicyProcessor.checkLighthousePasswordPolicy(PolicyProce ssor.java:651)

at com.waveset.provision.PolicyProcessor.checkPasswordPolicies(PolicyProcessor.jav a:574)

at com.waveset.provision.PolicyProcessor.checkAccountPolicies(PolicyProcessor.java :232)

at com.waveset.provision.Provisioner.checkPolicies(Provisioner.java:1102)

at com.waveset.view.UserViewer.checkPolicies(UserViewer.java:1559)

at com.waveset.view.UserViewer.checkPoliciesAndConstraints(UserViewer.java:1415)

at com.waveset.view.UserViewer.checkinView(UserViewer.java:1159)

at com.waveset.object.ViewMaster.checkinView(ViewMaster.java:725)

at com.waveset.sync.IAPIUserImpl.submitCreate(IAPIUserImpl.java:559)

at com.waveset.sync.IAPIUserImpl.submit(IAPIUserImpl.java:657)

at com.waveset.adapter.ADSIResourceAdapter.processUpdates(ADSIResourceAdapter.java :1419)

at com.waveset.adapter.ADSIResourceAdapter.getAndProcessChanges(ADSIResourceAdapte r.java:1456)

at com.waveset.adapter.ADSIResourceAdapter.poll(ADSIResourceAdapter.java:1546)

at com.waveset.adapter.SARunner.doRealWork(SARunner.java:268)

at com.waveset.task.Executor.execute(Executor.java:159)

at com.waveset.task.TaskThread.run(TaskThread.java:119)

</StackTrace>

</ResultError>

</ResultItem>

</WavesetResult>

2006-11-09T13:19:07.904+0500: lastname: Bogdanov9, accountId: Bogdanov9, objectGUID: <GUID=fb4016ebb4851b43af59763d6094932d>, isDisabled: false, identity: cn=Alexey L. Bogdanov9,ou=Users,ou=Test,dc=aut,dc=tst, uSNChanged: 78587, firstname: Alexey, AccountLocked: false, fullname: Alexey L. Bogdanov9, Initials: L

Policy Violation (password on Lighthouse User):

Must contain at least 4 valid characters.

But, when i use sample active sync form from ...sample/forms/ActiveDirectoryActiveSyncForm user make in Ligthhouse with password change12345.

Logicaly, from this code:

<Field name='waveset.password'>

<Comments>

Make up a password for accounts that are being

created. This makes it a constant

</Comments>

<Disable>

<neq>

<ref>feedOp</ref>

<s>create</s>

</neq>

</Disable>

<Expansion>

<cond>

<notnull>

<ref>activeSync.password</ref>

</notnull>

<ref>activeSync.password</ref>

<s>change12345</s>

</cond>

</Expansion>

</Field>

I think password from AD not put in to activeSync.

Why?

--

With MBR

Bogdanov Alexey.

[3834 byte] By [Bogdanov] at [2007-11-26 11:22:45]
# 1

--I think password from AD not put in to activeSync.

--Why?

You cannot change the user's password from the activeSync RA. The password is encrypted in Active Directory and you can't decrypt it.

You can read the Idm Resources Reference - Active Directory. There's a table with all the supported fields; the userPassword field is write-only.

If you want to take the AD password and send it to IDM, you want to use Password Sync.

Good luck

hjuarez at 2007-7-7 3:38:08 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2
Thx for answer. I understand reason.Good luck.
Bogdanov at 2007-7-7 3:38:08 > top of Java-index,Web & Directory Servers,Directory Servers...