Domain-specific 'Client.changepasswordpage' Configuration Option For Convergence (Doc ID 2455531.1)

Last updated on MAY 10, 2021

Applies to:

Symptoms

Consider a multi-domain Convergence 3 environment.  Also consider having an account that has pwdReset set to "true".

If user login with such an account on Convergence 2, Webmail shows an error message and forbids the access.

If user login with such an account on Convergence 3 without the 'client.changepasswordpage' option set, then Webmail does not show an error message and the user can access their Webmail session (even if the log shows an authentication error).

If user login with such an account on Convergence 3 with the 'client.changepasswordpage' option set, then Webmail does show an error message and offers a page to change password. Unfortunately,  such page is unique for all domains and that is not acceptable.

In iwcadmin, we note the parameter 'client.{}.changepasswordpage', for example 'client.{example.com}.changepasswordpage', but apparently it is ignored.

What is the expected behavior for the 'client.{example.com}.changepasswordpage' option ? Is it expected to work or is there some pre-requisite that needs to exist to enable such a feature ?

Due to this issue, the feature cannot be used differently for different domains.

Following test indicate that the 'domain' part of the attribute is ignored.

With following iwcadmin parameters set:

client.changepasswordpage = http://server.example.com:8080/iwc

client.{<domainname>}.changepasswordpage = http://server.example.com:8080

It can be confirmed that the Convergence - 'Change password' button redirects to the page http://server.example.com:8080/iwc

This makes it evident that the 'client.{<domainname>}.changepasswordpage' option setting is ignored.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.