PW Change of local user via WebGUI

Solved725 viewsCube password Password reset web app
3
0 Comments

Hi Skyline Team,

in our company a lot of people (including my boss :-)) are using Linux systems. So for access relevant infos for them we create dashboards as well as the basic monitoring is sufficiant.

https://dm-xxxx-platform.net/monitoring/

https://dm-xxx-platform.net/dashboard/#/

Problem comes with new users and PW policy > without the CUBE you can not change you PW.

A can not force them to have a VM + Cube for only this use case.

Nor is it nice like now to act as the PW generator and send SMS around.

Is there a way (maybe even API) to change the PW without Cube? Best would be withing this dialog , cerry on the cake a forgot pw mail 🙂

Thanks

BR Kristian

Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 4th July 2023

2 Answers

3
1.15K 1 Comment

Hi Kristian,

If you do not force to change the password at next login, the user is able to change it via Webservices V1.

First connect:

curl --location 'https://DMA-HOSTNAME/API/v1/Json.asmx/ConnectApp' \
--header 'Content-Type: application/json' \
--data '{
"host": "",
"login": "USERNAME",
"password": "PASSWORD",
"clientAppName": "testAppName",
"clientAppVersion": "1.0",
"clientComputerName": "testComputerName"
}'

You will receive a connection ID then e.g.:

{
    "d": "e7f136d6-0a6e-4d32-b6c5-73ffd4cc1305"
}

Use this ID when changing the password:
curl --location 'https://DMA-HOSTNAME/API/v1/Json.asmx/ChangePassword' \
--header 'Content-Type: application/json' \
--data '{
"connection": "e7f136d6-0a6e-4d32-b6c5-73ffd4cc1305",
"newPassword": "NEWPASSWORD"
}'

Br,
Felix

Marieke Goethals [SLC] [DevOps Catalyst] Selected answer as best 4th July 2023
Kristian Klewitz [DevOps Advocate] commented

Works perfect. Thanks

So we can live with it for now
1
8.84K 4 Comments

Hi Kristian - would it be an option for you to switch from stand-alone security towards delegating the user authentication to your existing identity provider?  This is highly recommended.  It brings you a lot of benefits.  Firstly, it is more secure (your standard IT policies related to password complexity, expiration, MFA and all that automatically apply) but also it is more convenient for the users (no separate account to keep track of and maintain, single sign on, etc.).

More information is available here: Advanced security configuration | DataMiner Docs

Ben Vandenberghe [SLC] [DevOps Enabler] Posted new comment 9th June 2023
Kristian Klewitz [DevOps Advocate] commented

Thanks Ben, this is indeed the best way.

Unfortutnalty our IT is the “department” under most pressure.
But we will check again if we can progress there.

So no option for local user without cube?
Ben Vandenberghe [SLC] [DevOps Enabler] commented

I’m afraid indeed that this is not available in the Web UIs.
Wim Bruynooghe [SLC] [DevOps Enabler] commented

Haven’t tested this in a while, but it should be possible in the legacy Dashboards (https://dma/dashboards) to change your password in case it has expired. We could evaluate to add this functionality also to the new authentication app.
Ben Vandenberghe [SLC] [DevOps Enabler] commented

Hi Wim – interesting, I did not think about that, haven’t been in that UI for ages. But I did take a quick peak now, and I do not seem to see an option there that would allow me to change my password (then again, I’m logged in via domain, so maybe therefore it doesn’t show?)