what is the proper way to change a users password in TFS 2013 - windows-server-2012-r2

I don't see a way through the website administration pages. If I am wrong, please correct me. Most of the searches I found, include ones on this site, said that TFS doesn't have anything built in to change the password.
I have users set up in their own group in Windows and those users have access to certain projects.
A user forgot his password so I was trying to reset it for him. I didn't find anything on the TFS administration webpages and the only place I know to change it is his user in Windows.
When I right click on the user and click change password, I get this message:
If I do it this way, will it update the TFS info? Is this the proper way to change the user's password in TFS 2013?

TFS doesn't have anything built in to change the password.
Correct. Per the TFS Authentication and Access page, there are no authentication options 'local' to TFS itself. A standard implementation of Basic authentication uses Windows user accounts, so changing their Windows user credentials will work correctly in TFS.
This does not "update" TFS; TFS simply queries the respective authority in workgroup/domain environments, and authentication will be successful as long as the user's Windows credentials are entered correctly.

Related

WindowsIdentity object works on IIS Express (Visula Studio) but does not work on IIS (10)

BC users need to retrieve files from a non-cloud file store. There is a simple webservice on the storage computer that can provide contents of the files. WS gets a user name. Users exists as users on the computer/LAN, where the files are stored, so the webservice is able to check whether the user has read permission on the file or not.
WS cannot get a user password, so I cannot make any impersonation, but the webservice runs in context with privileges able to read all these documents and can check permissions by user name.
I found a solution, how to check file permissions by user name. Solution works well in development environment (IIS Express in Visual Studio) but fails on IIS (production environment). The problem seems to be the initialization of the WindowsIdentity object, where proces on IIS fails with the message: "A specified logon session does not exist. It may already have been terminated."
Constructor of WindowsIdentity object probably calls some AD service and some restriction in IIS it rejects.
Do you have any suggestions on what to set up in IIS or what to do to make permission checking work?

Bitbucket/Atlassian login fails in Visual Studio 2017 when pushing to git repo

I'm trying to push my commits to my Bitbucket repository from Visual Studio 2017, and a window opens where it asks for my credentials. I'm pretty sure they're correct and I'm able to log in via browser. How do I fix this?
Atlassian (company which develops Bitbucket) has changed their authentication some time ago, and so you must enter your email address now instead of your account name to log in. You may need to log into your Bitbucket account via browser and create/update to an Atlassian account.
Additionally, if your repository is configured to log in with your username, and the authentication window appears with your account name already typed into the first input field, you'll need to remove it from your git config (in your repository's .git\config file) like so:
https://AccountName#bitbucket.org/AccountName/project1.git
change to
https://bitbucket.org/AccountName/project1.git
Next time you try to push, the authentication window shows up with both fields empty, enter your email address and password, and it should work.
As of today (Jul 21, 2022), when you try to push changes to git remote from the "Git changes" window in Visual Studio, it opens up a login screen which does not have OAuth.
So instead, if you open up the Terminal (CTRL + </kbd>) and try to push it from there using git push`, it will open up a different login screen which has OAuth.
Not sure why this is the behavior, but that's how it is in the current date, and I'm guessing its going to be changed in the future.
Old
Bitbucket now has a feature called App Passwords for authentication purposes. You can create a new App Password and use that to login to bitbucket to commit your changes. Your username will remain the same
Similar issue is mentioned here as well.

Add user to Sharepoint database

I created a web part for Sharepoint 2013 which reads the email address from the user that is currently logged in. I'm deploying locally and the only user I have is the administrator which has also no email address yet.
Where can I add an email address for the administrator?
Where can I create a new user account?
Sorry for these basic questions but I'm pretty new to SP and I couldn't find any solution on the web yet.
Thanks for your help!
This depends on your SharePoint instance (if it is on o365 or on-prem).
In case of o365 it is being managed by Azure AD (you can use the o365 admin center to change the email property) and if this is on-prem instance you have to change user property inside your Windows Server Active Directory.
After you do that make sure you run the full sync on the user profile job.
Needs to be done in the Active Directory. Search for "Active Directory Users and Computers" on your machine.

TikiWiki user management

How do I manage users of our tikiwiki?
The tiki process on the server is ran under my name. I am the user of the tikiwiki, but I am not sure I am an admin user.
Most likely not but question one is: How do I find that out?
(my Admin Menu is empty)
Some user contacted me saying her account is "Locked". It so happened that there is no one else to restore it, but me.
Can anyone help where to look? I only used my tikiwiki account to limited extent. Just wrote couple of articles. But never administered.
There is always a built in user in Tiki called "admin" and that is in a group called "Admins" which has permission to do everything, so it sounds like your user isn't in that group.
If the admin user was set up with a valid email account (and you know it and have access to it) then you can get the password reset and a link to make a new one will be emailed to that address. If you can access the installer or the database then there are various other options on how to recover the admin login here: https://doc.tiki.org/Lost+admin+password
Once you have done this and can administer the Tiki again you should add your usual user to the Admins group.
To unlock another user's account you will need to either access the user admin list (once you have admin login again) or if you can get to the database you should be able to clear the relevant field in the database directly using phpmyadmin or similar as a last resort (ask again if you need this much detail).

Running ColdFusion as a specific user

On this page, it talks about Windows NT, 2000, XP and 2003. Fortunately, I have a Windows 7 machine.
The very first line says:
In User Manager for Domains, create a local user for the ColdFusion
service to log in as.
I don't see a "User Manager for Domains", so do they mean just "Add a new user"?
If it DOES mean that, can I use my own user account as the ColdFusion user, or should I specifically create a new account just for ColdFusion?
If you are creating a domain account it has to be created ON the domain - using user manager for domains connected to your domain controllers. If that's what you need then a sys admin has to help.
If you are doing a "local" user on a windows 7 I always end up hunting around for the right view of user manager before I get it right :) Here are the steps that I use:
Search from start and open the "user accounts" cpl.
Click on "Manage User Accounts"
Click on the "advanced" tab
Click on the "advanced" buttton.
This takes me to the mmc-like view of users that I'm accustomed to where I can add a user, change membership, set passwords etc.
Hope this helps :)
You can use your own username or you can create one for CF to run as. Creating a user to run CF as probably more closely replicates your production environment ( an assumption ) so if production for example writes to a UNC path the coldfusion user must have acces. You could
Mimic this locally.
You can use either an account local to the OS where ColdFusion is running, or a domain account if the OS is joined to a domain. In your case, you can just create a local user on your Windows 7 OS and run the ColdFusion Application Service as that user. The user account will need access to ColdFusion's installation folder, as well as read access to the webroot.
The whole idea is to run the ColdFusion service as a user with the minimum privileges necessary to handle requests and prevent access to other resources in the event of a data breach or remote code execution (e.g. someone exploits an upload form and manages to get their own CF code to run on your server; it's not pretty but can be somewhat restricted by running the CF service under a user account with restricted access).
As someone else mentioned, if CF needs access to other network resources, the user account will need to be granted access to those resources as well (either by using a domain account or having a local account with the same username and password on the remote system).
Just did this on Windows 2008 R2 with CF 10. The trick was to change the ownership of the c:\windows and c:\windows\system32 directories as outlined here.
change ownership from trustedInstaller