Selfservice Portal - LDAP Attribut for "Mail for Password Reset"

UCS - Univention Corporate Server
#1

Hi,

in which LDAP Attribute will be saved this value? I cant find it?

grafik

Thx!

Erik

#2

Good day,

that would be univentionPasswordSelfServiceEmail. (See also: Q&A: Which mail fields for users are available in UCS?)

Best regards
Jan-Luca

#3

perfect, thx
 but “PasswordRecoveryEmailVerified” seems not existing or?

#4

What do you mean by “seems not existing”? PasswordRecoveryEmailVerified is the name of the UDM attribute and can be seen in your screenshot too (“E-Mail-Adresse verifiziert”).

Best regards
Jan-Luca

#5

yes of course, udm i see but not the ldap attribut i mean :slight_smile:

#6

The attribute is univentionPasswordRecoveryEmailVerified (as for the other one just prefix the UDM name with univention).

#7

that i also tried, but seems not correct, i got this error in my job: NoSuchAttributeException

javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 - 0000200A: objectclass_attrs: attribute ‘univentionPasswordRecoveryEmailVerified’ on entry

Thx!

#8

I guess the attribute has to be set for this to work. You could catch the exception and handle this as a no.

#9

mmhhh sorry i dont get it, where i should “set” this attribute?

#10

“set” = Assign a value. Currently the value is not TRUE nor FALSE but None as it is undefined and not set at all, this is why your code throws the exception. As long as this state occurs it means that functionally it is the same as FALSE as the mail address is not verified.

#11

so first general question, i dont see this attributes in a ldap browser (doenst matter which one
 softera ldap browser, Active Directory Explorer, ldapadmin)
 it looks like this:

grafik

so it seems something general is not correct on my side
 what could this be?

and for sure for this example i set values via web gui

#12

The Self-Service App defines it’s own LDAP schema for these attributes, maybe there is something to configure in you application?
I have no knowledge of this kind of graphical tooling, instead I would advise to use udm or univention-ldapsearch on the commandline or the LDAP-Tree UMC module.

For more info regarding the former:

Best regards
Jan-Luca

#13

You’ve connected to which type of LDAP server? Samba 4 (port 636 if installed) or OpenLDAP (port 7636)?

#14

i have samba4 installed but i connect ldap via default port 389. 636 and 7636 doesnt work, i got everytime:

grafik

Thx!

Erik

#15

You’ve used “SSL+Benutzer+Kennwort” as security grade?

#16

yes i think so:

grafik

#17

As you have to connect to OpenLDAP the dn is wrong: it’s uid=it not cn=it

1 Like
#18

ohhhh damn yes of course

now i can connect and tadaaaaa magic
 is this this univention fields

im so sorry

Mastodon