vavavr00m / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

What SMS Gateway Service to use with PWM? #259

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Login to the PWM Configuration Editor
2. Go to Settings | SMS
3. Enter the SMS gateway

What is the expected output? What do you see instead?
I couldn't find a decent SMS Gateway service that just works. So far I looked 
at Twilio and CellTrust, but no luck yet. They both offer nice features but 
they're too advanced for what PWM needs. Is there an SMS gateway that plays 
nice with PWM?

What version of PWM are you using?
1.6.3

What ldap directory and version are you using?
Active Directory, 2008

Please paste any error log messages below:

N/A

Original issue reported on code.google.com by icsfi...@yahoo.com on 13 Aug 2012 at 11:30

GoogleCodeExporter commented 9 years ago
See the admin manual for two examples that do work. Also Twilio should work 
(tested before) with a config like:

sms.userSmsAttribute=telephoneNumber
 sms.gatewayURL=https://api.twilio.com/2010-04-01/Accounts/ACxxx/SMS/
Messages.xml
 sms.gatewayUser=ACxxx
 sms.gatewayPassword=**removed**
 sms.gatewayAuthMethod=HTTP
 sms.requestData={"":"From\u003d%2B14155992671\u0026To
\u003d9413219441\u0026Body\u003dtwilio+testing+9"}
 sms.maxTextLength=160
 sms.senderID=+1415xxxx
 sms.phoneNumberFormat=PLUS

where ACXX is my Twilio Account ID.

Fill in the details for your account.

In fact, when configured properly, it should work fine with any HTTP enabled 
SMS service that accepts a single request to send a message. To figure out what 
goes wrong, set the log level to TRACE. If you still experience problems, 
reopen and submit a log at TRACE level.

Original comment by menno.pi...@gmail.com on 14 Aug 2012 at 2:01

GoogleCodeExporter commented 9 years ago
OK. I actually got it working with ClickATell. It's the only example in the 
admin guide, and it was very easy to implement. However, now when I try to 
change the password on an account I get the following error. The Default Domain 
Policy says just one day needs to pass before the password can be changed 
again. It's been over two days since I changed the password for this test 
account. The account is NOT locked out, is NOT disabled, is NOT expired, and is 
NOT set to change password on next logon. Is it possible PWM keeps it's own 
history for password change attempts and it's throwing off the password reset 
process? Or am I missing something?

This is the process I'm following. 

1. Go to the PWM login page and click "Forgotten password"
2. Type in the username, PWM does a secure LDAP query to AD, and sends out a 
code via SMS. 
3. I type in the code, and the code is validated. I am then taken to a new 
screen where I can select a new password. I type in a new password that meets 
our AD password policy, I confirm the password, then click "Change password". 
Instead of the password being changed, I see the message below.

Also to note is that I use a Proxy account that is part of the Domain Admins 
groups. Please advise.

Not enough time has passed since last password change { 4033 PASSWORD_TOO_SOON 
(error setting password for user 'CN=gpop 
test,OU=GPOPTEST,OU=RSC,DC=cpb,DC=corp'' 
com.novell.ldapchai.exception.ChaiPasswordPolicyException: [LDAP: error code 19 
- 0000052D: AtrErr: DSID-03190F80, #1: 0: 0000052D: DSID-03190F80, problem 1005 
(CONSTRAINT_ATT_TYPE), data 0, Att 9005a (unicodePwd) ]) }

Original comment by icsfi...@yahoo.com on 23 Aug 2012 at 10:40