7/8/2025 7:32:41 AM
|
|
slxdeveloper.com Community Forums |
|
|
|
The Forums on slxdeveloper.com are now retired. The forum archive will remain available for the time being. Thank you for your participation on slxdeveloper.com!
Forum to discuss general administration topics for SalesLogix (including LAN & remote topics). View the code of conduct for posting guidelines.
|
|
|
|
How to force user password changes?
Posted: 09 Nov 06 1:14 PM
|
fiogf49gjkf0d I know that it isn't currently scoped for SLX version 7 but has anyone found a good way of forcing password changes for users? Or perhaps programatically setting their SLX password on the host and communicating such to them?
The true issue is that Intellisync currently requires the password stored on the host database, so AD authentication is ruled out as an option in this equation. The true solution would be if Intellisync passed AD authentication to SLX.
Perhaps in the mean while is there a utility available to change the SLX password stored in the host to match the AD password?
Your thoughts? |
|
|
|
Re: How to force user password changes?
Posted: 09 Nov 06 1:29 PM
|
fiogf49gjkf0d Hi David
The problem you have is that you risk exposing the password. As you know with the current implementation of AD -> SLX Password checking the password isn't stored - only the link to the SID is - therefore, no matter what the SLX stored password is, if the AD/WindowsAPI call for the logged on password validates against the SID for this user - then you can login. At no point is the password actually exchanged and, therefore, no way of reverse engineering it or sniffing it over the wire.
By forcing the password into SLX (not that it's possible!) - then there's a possibility to the password could be trappable - which is a huge downside.
It's not so bad if someone figures out the SLX password as it's "only" the CRM product. Figuring out their network password is bad news.
What really needs to happen is that the Intellisync authentication needs to catch up with SLX's SID/AD mechanism. But, as you say, no plans for that currently.
Sorry. Mike |
|
|
|
You can
subscribe to receive a daily forum digest in your
user profile. View the site code
of conduct for posting guidelines.
Forum RSS Feed - Subscribe to the forum RSS feed to keep on top of the latest forum activity!
|
|
|
|
|
|
|
|