Changing user PIN or password

cdnadmin · ‎01-24-2014

This document was generated from CDN thread

Created by: JERRY STEINHAUER on 19-08-2010 08:21:19 PM
Hello,

I can get user credential information:

GET /vmrest/users/<objid>/credential/password

I get back a Credential document, thus:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Credential>
  <URI>/vmrest/users/92a3b77e-3c6d-4b9c-8678-8a104b3f9d04/credential/password</URI>
  <UserObjectId>92a3b77e-3c6d-4b9c-8678-8a104b3f9d04</UserObjectId>
  <CredentialType>3</CredentialType>
  <Credentials/>
  <IsPrimary>false</IsPrimary>
  <CantChange>false</CantChange>
  <DoesntExpire>false</DoesntExpire>
  <TimeChanged>2008-12-07T08:43:46Z</TimeChanged>
  <HackCount>0</HackCount>
  <Locked>false</Locked>
  <Alias>carol</Alias>
  <CredMustChange>true</CredMustChange>
  <CredentialPolicyObjectId>0e466ccc-b49c-41af-838d-ff1a5c9cbc43</CredentialPolicyObjectId>
  <Hacked>false</Hacked>
  <ObjectId>9db6891f-1ecc-4a1e-a905-1e47bd20aa61</ObjectId>
  <EncryptionType>3</EncryptionType>
</Credential>

According to 7.1.3-CUPI-WADL.xml, the PUT method of /vmrest/users/<objid>/credential/password should take as input a Credential object, perhaps with <Credentials> set with the new password.

However, whatever I seem to send /vmrest/users/<objid>/credential/password, I get a 415 back.

How can I format the request to change a user password? or a PIN?

Also, I assume that the changes here go through IMS, so credential restrictions like trivial passwords are enforced?

Thanks!

- Jerry

Subject: RE: Changing user PIN or password
Replied by: Matthew Penning on 19-08-2010 08:21:19 PM
Hi Jerry - that should work, but if you are getting a 415 (invalid media type) it usually means it doesn't understand the content type. Try making sure to set the "Content-Type" header to "application/xml" if you aren't already.

- Matt

Subject: RE: Changing user PIN or password
Replied by: Rene Forstner on 19-08-2010 08:21:27 PM
Hi,

I'm also trying to change the users pw/pin!

The content type is already set to "application/xml", the method is set to "put", the charset encoding is utf8 and the synthax is the following:

PUT https://SERVER/vmrest/users/{objID}/credential/pin

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Credential><Credentials>00000</Credentials></Credential>

The only response i get, is a 400 Error

Can anybody, based on this few facts, figure out, what the problem is?

Attempt 2:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Credential><CredentialType>3</CredentialType><Credentials>00000</Credentials></Credential>

Attempt 3:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Credential><CredentialType>3</CredentialType><EncryptionType>5</EncryptionType><Credentials>00000</Credentials></Credential>

Is the encryption type, the format i should use to put the pin, or the format how the pin's are stored?

with kind regards

Subject: RE: New Message from Rene Forstner in Cisco Unity Connection Provisioning I
Replied by: David Wanagel on 19-08-2010 08:21:28 PM
Along with the HTTP 400 error is XML content describing the error details, can you tell us what that says? I suspect your pin is too simple and is not ¿strong¿ enough based on the ¿Recommended Voice Mail Authentication Rule¿. The authentication rules are not a routine maintenance item and can only be administered via the GUI.

-Dave

From: Cisco Developer Community Forums [mailto:cdicuser@developer.cisco.com]
Sent: Wednesday, April 28, 2010 4:53 AM
To: cdicuser@developer.cisco.com
Subject: New Message from Rene Forstner in Cisco Unity Connection Provisioning Interface (CUPI) - CUPI Questions: RE: Changing user PIN or password

Rene Forstner has created a new message in the forum "CUPI Questions":
--------------------------------------------------------------
Hi,

I'm also trying to change the users pw/pin!

The content type is already set to "application/xml", the method is set to "put", the charset encoding is utf8 and the synthax is the following:

PUT https://SERVER/vmrest/users/{objID}/credential/pin

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Credential><Credentials>00000</Credentials></Credential>

The only response i get, is a 400 Error

Can anybody, based on this few facts, figure out, what the problem is?

Attempt 2:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Credential><CredentialType>3</CredentialType><Credentials>00000</Credentials></Credential>

Attempt 3:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Credential><CredentialType>3</CredentialType><EncryptionType>5</EncryptionType><Credentials>00000</Credentials></Credential>

Is the encryption type, the format i should use to put the pin, or the format how the pin's are stored?

with kind regards

--
To respond to this post, please click the following link:
<http://developer.cisco.com/web/cupi/forums/-/message_boards/message/2147869>
or simply reply to this email.

Subject: RE: New Message from Rene Forstner in Cisco Unity Connection Provisioning I
Replied by: Rene Forstner on 19-08-2010 08:21:28 PM
Hi Dave,

after i figured out the error xml i could see, that the problem is the flag "User Cannot Change".

When this parameter is enabled, you can'nt change any credential parameters via cupi.

Is this a bug or design ident? We are using Cisco Unity Connection version: 7.1.3ES11.21900-11

with kind regards

Subject: RE: New Message from Rene Forstner in Cisco Unity Connection Provisioning I
Replied by: David Wanagel on 19-08-2010 08:21:28 PM
Sorry Rene, I posted this answer yesterday, but it didn't seem to make it to the forum:

The behavior of the CUPI interface should be very much like the regular GUI administration web application. The GUI allows an administrator to change passwords and pins even if the ¿User cannot change¿ option is selected. CUPI should do the same, so the behavior you are seeing is a defect. I will have to consult with our product owner to find out which versions will get a fix.

-Dave

Subject: RE: New Message from Rene Forstner in Cisco Unity Connection Provisioning I
Replied by: Rene Forstner on 19-08-2010 08:21:28 PM
Hi,

I'm currently occupied with this topic again.

I can change the user's pw, when the CantChange Flag is set to 0.

You can set this flag to 0, before you change the pw, but when you are finish you can't set it to 1 again.

kind regards
rené

Subject: RE: New Message from Rene Forstner in Cisco Unity Connection Provisioning I
Replied by: Rene Forstner on 19-08-2010 08:21:29 PM
Hi @all

In the cisco bug toolkit i've found a version which includes a bugfix for this problem.
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w

iew>Normal</w

iew>
<w:Zoom>0</w:Zoom>
<w:TrackMoves />
<w:TrackFormatting />
<w:HyphenationZone>21</w:HyphenationZone>
<w

unctuationKerning />
<w

alidateAgainstSchemas />
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w

oNotPromoteQF />
<w:LidThemeOther>DE-AT</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
   <w:BreakWrappedTables />
   <w:SnapToGridInCell />
   <w:WrapTextWithPunct />
   <w:UseAsianBreakRules />
   <w

ontGrowAutofit />
<w:SplitPgBreakAndParaMark />
<w

ontVertAlignCellWithSp />
<w

ontBreakConstrainedForcedTables />
<w

ontVertAlignInTxbx />
<w:Word11KerningPairs />
<w:CachedColBalance />
</w:Compatibility>
<w

oNotOptimizeForBrowser />
<m:mathPr>
   <m:mathFont m:val="Cambria Math" />
   <m:brkBin m:val="before" />
   <m:brkBinSub m:val="--" />
   <m:smallFrac m:val="off" />
   <m:dispDef />
   <m:lMargin m:val="0" />
   <m:rMargin m:val="0" />
   <m:defJc m:val="centerGroup" />
   <m:wrapIndent m:val="1440" />
   <m:intLim m:val="subSup" />
   <m:naryLim m:val="undOvr" />
</m:mathPr></w:WordDocument>
</xml>


(7.1(5)su1a)

One thing i have noticed: The Timestamp 'Time Last Changed' is not updated.