svcUserAdmin GetUsers() returning blank passwords
Question asked by Ant - 1/25/2016 at 6:07 AM
Answered
I'm using the SmarterMail web service to try and get a list of users and their passwords for a domain. This is to do a migration to another IMAP server.
 
According to this http://mail.smartertools.com/services/#svcUserAdmin_GetUsers, a call to svcUserAdmin's GetUsers should return a UserName and Password, among other fields. 
 
For me however the Password is always blank, although it's tag is there in the returned data.
 
I'm fairly certain this script I have used to work as I have used it before.
 
Am I doing something wrong to get it to return the user's password?
Ant Replied
It looks also like GetUser doesn't return the password.
 
But GetRequestedUserSettings will do if the password field is specified as the incoming argument.

I wonder if retrieving the password from GetUsers() or GetUser() was removed as a security precaution?
Matt Petty Replied
Employee Post Marked As Answer
We added an optional security field to allow retrieval of user password from the API when called from a non-Primary System Administrator.
The Primary System Administrator needs to go to the administrator account you use for the API and check the box that says
"
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com
Ant Replied
Thanks Matt - that sorted it. It'd be worth removing the password-access via GetRequestedUserSettings if that box isn't checked, too.

Reply to Thread

Enter the verification text