• Anonymous user cannot reset their notes password

    By Tinus Riyanto 1 decade ago

    I have setup the application so that anonymous users can go to the database and click Reset Password without being prompted to login. However when trying to reset Notes Password, the page display error that said Error: 4755ResetUserPassword Failed: Agent containing ResetUserPassword method must be signed by a designated Password Resetter.

    I can solve this by disabling the Run As Web User in Agent Properties but then I got the error that agent.runWithDocumentContext() is null which I assume means that it is unable to create and pass the document context. Upgrading the Anonymous ACL to Author with Create Document does not help

    • By Vikas Tiwari 1 decade ago

      Hello Tinus,

      The error is returned from Domino Server and clearly suggest that the User ID that you have used to sign the “Forgot Password” application doesn't have Password Reset authority in ID Vault. Please re-validate if User is listed as Reset Authority in ID Vault. Please ensure to check the “Password reset agent authority” checkbox in the Authority To Reset Passwords dialog next to the name of the password reset authority. It is not enabled by default.

      Use this link to verify your ID Vault. There is no problem with the application: http://www-01.ibm.com/support/docview.wss?uid=swg27024285&aid=5

    • By Tinus Riyanto 1 decade ago

      OK, manage to solve this problem by doing the following.

      1. Run as Web User needs to be enabled on the Agent Properties - Security Setting.
      2. You need to add BOTH your signer id AND the server id that will host the application as Password Reset Authority AND ALSO enable the “Password reset agent authority” option underneath it.

      If you don't enable the option then you get the above error : Agent containing ResetUserPassword method must be signed by a designated Password Resetter
      If you don't include your server id on that list you will get a Trust Certificate lookup error : Missing or invalid Password Reset Trust certificate

      Hope this help whoever run into problem in setting up agent based password reset authority

      • By Vikas Tiwari 1 decade ago

        Thank you ! I'll add this to the application FAQ. Much appreciated for the feedback !