Policy Server Guides › Policy Server Configuration Guide › Password Policies › User-initiated Password Changes › Add a Change Password Link › Allow Specific Users to Change Their Passwords in CGI

Allow Specific Users to Change Their Passwords in CGI

If you want to allow only certain users to change their own passwords, complete the following procedure.

Follow these steps:

1. Modify the permissions for the PWLogin.template file:
   1. Navigate to the following location:

      web_agent_installation_dir/pw

      Where web_agent_installation_dir is the installed location of the Web Agent.

   2. In File, Properties, deselect the read-only attribute.
2. Edit the text in the PWLogin.template file:
   1. Open PWLogin.template in a text editor.
   2. Add the following line to the template at an appropriate location:

      <a href="/siteminderagent/pwcgi/smpwservicescgi.exe?
      SMAUTHREASON=34&TARGET=$$TARGET$$">Change Password</a>
      

   3. Save the file.
3. Access the Administrative UI.
4. Create an Authentication Scheme with the following settings:
   • Server Name: The name of the server where the Password Services CGI resides. For example:

     myserver.mycompany.org

   • Target: /siteminderagent/pwcgi/smpwservicescgi.exe
5. Optionally, create a policy domain.

   Include the user directory that contains the users that are allowed to change their own passwords in the policy domain.

   If you do not create a policy domain, select an existing policy domain.

6. Create a realm that specifies the directory that you are protecting. In the Authentication Scheme list box, select the authentication scheme that you created in step 4.
7. Create a rule under the realm that specifies the resources that you are protecting.

   Note: If your rule specifies all of the resources (*) in the protected directory, then separate rules for localized Password Services are not necessary.

8. Create a policy that binds the rule you created and the users/groups who are allowed to change their passwords.

More information:

Create and Use a Localized Password Services Properties Files