No Challenge Response check when using iChain or Access Manager

  • 7002453
  • 26-Jan-2009
  • 26-Apr-2012


Novell Identity Manager User Application 3.5.1
Novell Identity Manager User Application 3.6
Novell Identity Manager User Application 3.6.1


When fronting the UserApplication with either iChain or Access Manager with UserApplication patch V applied, the Challenge Response check does not occur. This happens when a user does not have an expired password but has not filled
out challenge/response information.  It works correctly accessing the UserApplication directly
but only goes to the default/called page when accessing through iChain.  If
this is a new user who needs to set their password, it works correctly via
iChain and directly accessing UA. 


This was found to be a bug within the User Application 3.5.1, User Application 3.6.0 and User Application 3.6.1. To correct the behavior please apply the latest public patches which are available on the Novell download site. At the time of this posting the following patches are the current public patch versions:
User Application 3.5.1: UA351Patch W 
User Application 3.6.0: UA36Patch B
User Application 3.6.1: UA361Patch D


Reported to Engineering