Hi Neil, When sending multidomain user update requests you have to specify the hashing function as a separate parameter, as shown in:
http://code.google.com/googleapps/domain/gdata_provisioning_api_v2.0_developers_protocol.html#Creating_a_User_for_a_Domain <http://code.google.com/googleapps/domain/gdata_provisioning_api_v2.0_developers_protocol.html#Creating_a_User_for_a_Domain>In your case, the request should look like the following: <atom:entry xmlns:atom='http://www.w3.org/2005/Atom' xmlns:apps=' http://schemas.google.com/apps/2006'> <apps:property name="password" value="your domain password in SHA-1 hash format"/> <apps:property name="hashFunction" value="SHA-1"/> </atom:entry> Please also note that the multidomain feed ( https://apps-apis.google.com/a/feeds/user/2.0/test.g5.domain.com/user) requires you to specify the target user email address and not just the username. Hope it helps Claudio On Mon, Apr 11, 2011 at 5:11 AM, Neil Rutherfoord < [email protected]> wrote: > Hi, > I'm working on the SSO solution for a client - part of the authentication > process includes a password push via the provisioning API. > > I'm testing out the multi domain feed ( > https://apps-apis.google.com/a/feeds/user/2.0/test.g5.domain.com/user ) > I have a user in a subsiduary domain/user, > [email protected] . > > When i try updating the users password (PHP code, not using Zend libraries) > using the feed like so. > $entry = "<atom:entry xmlns:atom='http://www.w3.org/2005/Atom' > xmlns:apps='http://schemas.google.com/apps/2006'> > <apps:property name='password' value='".md5($new_pass)."' > hashFunctionName='MD5' /> > </atom:entry>"; > > it seems to be storing the hashed string on the Google end, when i disable > SSO and login with the username, i have to used the hashed version of the > password in order to login. I cannot use the cleartext password in the > Google login form. > > If i use this in the atom feed eg. <apps:login password="md5($new_pass)" > hashFunctionName='MD5' /> i still have the same problem. > > Do i need to specify the username in the apps:login atom value, or can i > post it like i have. > > What is the correct atom entry that i must post to that feed url in order > to change a users password, or is there something buggy in the API? > > Regards, > > Neil Rutherfoord > > -- > You received this message because you are subscribed to the Google Groups > "Google Apps Domain Information and Management APIs" group. > To post to this group, send email to > [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-apps-mgmt-apis?hl=en. > -- You received this message because you are subscribed to the Google Groups "Google Apps Domain Information and Management APIs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-apps-mgmt-apis?hl=en.
