[cisco-voip] Reset Unity mailbox password..

Mon Sep 18 07:23:04 EDT 2006

For our customers, we create a "Help Desk" COS in Unity and assign very
granular access to things like changing passwords.  When they log into
the Unity SA, they only see the options specified.

________________________________

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Tim Reimers
Sent: Sunday, September 17, 2006 9:40 PM
To: Lelio Fulgenzi; Jim McBurnett; cisco-voip at puck.nether.net
Cc: Kelly Looney; Alan Surrette
Subject: Re: [cisco-voip] Reset Unity mailbox password..

Cool! 

Thanks...

that's the biggest request we get -- other things, I think we can
continue to handle internally..

It may take the skill of our app developer to do this, not me.. .but
that does look as though it's do-able...

thanks guys..

Tim

________________________________

From: Lelio Fulgenzi [mailto:lelio at uoguelph.ca]
Sent: Sat 9/16/2006 11:31 PM
To: Jim McBurnett; Tim Reimers; cisco-voip at puck.nether.net
Cc: Alan Surrette
Subject: Re: [cisco-voip] Reset Unity mailbox password..

Thanks Jim. Looks like there might be something there that Tim can use:
http://www.ciscounitytools.com/Documents/programaticAdmin.doc

Update subscriber's password

Setting the password is easy going through the stored procedure since it
will take care of hashing your raw phone password into an MD5 string for
you on the back end.  MD5 strings should always be exactly 32 characters
here.  Since phone passwords can only be 20 digits in length, the stored
procedure assumes that if the string is 32 characters long it's already
been hashed into an MD5 string and will pass it through directly.
Otherwise it'll hash it for you on the back end so you can simply pass
through the raw digits for the phone password you want to set and it'll
take care of it for you.  If you're paranoid you can also hash the phone
password into it's MD5 string and then pass that into the stored
procedure instead.  It'll handle it either way.

When setting the password for a subscriber it's up to you to be sure it
complies with the password policy for the site.  If you pass in a blank
string for the password, for instance, the phone password will be
cleared.  You can check the phone password policies in the PwPolicy
table in UnityDB.  The stored procedure does not do any enforcement of
the site's policy, so make sure you're careful here.

    oCommand.CommandText = "sp_ModifySubscriber"

    oCommand.Parameters.Item("@SubscriberObjectID") =
oCommand.CreateParameter("SubscriberObjectID", adGUID, adParamInput, ,
strSubscriberObjectID)

    'The phone password is passed in as clear text in this example - it
gets crunched and encrypted by the SP during the subscriber update
process.  You can pass in a "pre hashed" MD5 string yourself - if the
string is exactly 32 characters long the stored proc will pass it
through "as is".

    oCommand.Parameters.Item("@PWDTMF") =
oCommand.CreateParameter("PWDTMF", adVarChar, adParamInput, ,
txtPhonePassword.Text)

'Passwords are not written through to the directory, no need to synch.

        oCommand.Parameters.Item("@DirectorySync") =
oCommand.CreateParameter("DirectorySync", adInteger, adParamInput, , 0)

    'Let the stored procedure call rip.

    oCommand.Execute

Since phone passwords are not pushed into the directory there's no need
to issue a synchronization request for this.  You're done.

	----- Original Message ----- 

	From: Jim McBurnett <mailto:jim at tgasolutions.com>  

	To: Tim Reimers <mailto:tim.reimers at asheville.k12.nc.us>  ;
Lelio Fulgenzi <mailto:lelio at uoguelph.ca>  ; cisco-voip at puck.nether.net 

	Cc: Alan Surrette <mailto:alan.surrette at asheville.k12.nc.us>  

	Sent: Saturday, September 16, 2006 10:42 PM

	Subject: RE: [cisco-voip] Reset Unity mailbox password..

	Take a look over at www.ciscounitytools.com

	There are some architecture notes there...

	J

________________________________

	From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Tim Reimers
	Sent: Saturday, September 16, 2006 9:19 PM
	To: Lelio Fulgenzi; cisco-voip at puck.nether.net
	Cc: Alan Surrette
	Subject: Re: [cisco-voip] Reset Unity mailbox password..

	You know, now that  I think about it--- hmm...

	I'll have to check around in AD on Unity and see where they've
embedded the password in some AD field-- I'm betting that the mailbox
password is in there somewhere..

	We have some internal experience in scripting AD for our main
domain --- if it's there in AD in some schema extended field... hmmm..

	time to break out that LDAP browser that someone posted a link
to - I did manage to get that to connect to Unity's AD, though not our
data AD or the CCM DCDirectory..

________________________________

	From: Lelio Fulgenzi [mailto:lelio at uoguelph.ca]
	Sent: Sat 9/16/2006 8:18 PM
	To: Tim Reimers; cisco-voip at puck.nether.net
	Cc: Alan Surrette
	Subject: Re: [cisco-voip] Reset Unity mailbox password..

	I have not seen anything like this. Although it would make for a
great utility, say send their reset password to their email address. I
cannot find any reference to an API like SOAP for unity, that would have
helped immensely. You can try posting in the Cisco forums, I'm pretty
sure Jeff Lindborgh reads that. Jeff was the primary developer for Unity
and I believe he still is.

	If your users have the domain password available to them, check
out the PCA login page. It's a little different than the web/sa pages
and might fit your needs.

		----- Original Message ----- 

		From: Tim Reimers
<mailto:tim.reimers at asheville.k12.nc.us>  

		To: cisco-voip at puck.nether.net 

		Cc: Alan Surrette
<mailto:alan.surrette at asheville.k12.nc.us>  

		Sent: Saturday, September 16, 2006 12:08 PM

		Subject: [cisco-voip] Reset Unity mailbox password..

		hello everyone--

		I'm looking for a way to allow a subscribers Unity
mailbox password to be reset in a way OTHER than through the Unity
webpages (and TermServ to Unity)

		I really really need to limit the access of people to
full Unity to just a few..

		.. but at the same time, those few of us with full
access CANNOT keep up with the requests for resetting of passwords. (I
know, you'd think that's a user education thing..)

		So -- I'm hoping for something like Greetings
Administrator to have rights to reset passwords on any mailbox --
similar to how the person using GA can select any call handler and work
with it..

		I'm hoping there's a level of access I can grant to a
additional staff members at remote sites just to be able to clear and
reset a password using their phone and something like Greetings
Administrator?

		If that's not clear, just email me and I'll try to
confuse you some more... ;-)

		thanks, Tim

________________________________

		_______________________________________________
		cisco-voip mailing list
		cisco-voip at puck.nether.net
		https://puck.nether.net/mailman/listinfo/cisco-voip

-----------------------------------------
Disclaimer:

This e-mail communication and any attachments may contain
confidential and privileged information and is for use by the
designated addressee(s) named above only.  If you are not the
intended addressee, you are hereby notified that you have received
this communication in error and that any use or reproduction of
this email or its contents is strictly prohibited and may be
unlawful.  If you have received this communication in error, please
notify us immediately by replying to this message and deleting it
from your computer. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20060918/435226bc/attachment-0001.html 