Symantec IGA

  • 1.  IdM 12.6.7 challenge responses not being saved

    Posted Aug 15, 2017 10:34 AM

    Hi experts,

     

    I have setup the ForgottenPasswordHandler, with User as Object Type and com.netegrity.ims.adapters.ForgottenPasswordHandler as class. Several logical attributes as |Question#| and |Answer#|, and |VerifyQuestion| |VerifyAnswer| also as logical attributes.

     

    Physical attribute is %PASSWORD_HINT%. with ? as delimeter, false in ControlData property and multivalued_attribute in schema.

     

    I tried to register some user's passwords on User Console. It shows that the task ended, but I noticed that no data was recorded.

     

    So I went to JBoss log, and found followed message, someone can figure what is missing?:

     

    11:06:46,626 WARN  [ims.llsdk.directory.jdbc.jdbcbase] (Thread-55350 (HornetQ-client-global-threads-1507943089)) Failed to add tblUserPasswordhints.passwordhint with value: {RC2}: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 to ObjectType::USER managed object jsosatest

     



  • 2.  Re: IdM 12.6.7 challenge responses not being saved
    Best Answer

    Posted Aug 15, 2017 11:27 AM

    Check on the database side for tblUserPasswordhints.passwordhint schema. Maybe the column length cannot accommodate the value.



  • 3.  Re: IdM 12.6.7 challenge responses not being saved

    Broadcom Employee
    Posted Aug 16, 2017 09:38 AM

    Hi Julian,

    Did you see Kenny's suggestion, did you get to check on that, did it help?

     

    Sagi



  • 4.  Re: IdM 12.6.7 challenge responses not being saved

    Posted Aug 24, 2017 02:33 PM

    Hi Sagi, sorry I couldn't answer yet becouse I was not able to test it until today.

     

    I found that column length was 700 nvarchar. I altered table to leverage length to 4000 nvarchars. Then with superamdin user tried to select questions and answers, task appears to be finished but no data is saved on database.

     

    Log only says:

     

    15:16:32,917 WARN  [ims.llsdk.directory.jdbc.jdbcbase] (Thread-4541 (HornetQ-client-global-threads-1087353515)) Failed to add tblUserPasswordhints.passwordhint with value: {RC2}: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 to ObjectType::USER managed object superadmin



  • 5.  Re: IdM 12.6.7 challenge responses not being saved

    Posted Aug 24, 2017 03:27 PM

    Hi all, I was seeing something.. I have another environment (same version but other configurations), and passwordhint table in this environment shows one row for each pair question/answer. For example, for superadmin, I have in the working environment several files with userid 1 (superadmin), and different encrypted values, very similar to the one I copied but a lot shorter.

     

    I tried to insert the value I copied in the working environment, and the one who is denying is the database, saying that index value (900 bytes, non-updatable) is too short to store this value.

     

    How could I configure the non-working environment, so instead of storing 1 file like the one before, it can save every pair challenge/answer as a different row for each user, as the working environment, instead of 1 row with all?