Regresar
-
Título
User is unable to use Register or change their password if the check box "User must change password at next logon" -
Descripción
User is unable to use Register or change their password if the check box "User must change password at next logon" is enabled in Active Directory and the following error message is visible in the Verbose Logging.
"QPM.Service.Modules.ADHelpers.dll ADHelper.ValidateCredentials() >> Trying to establish a LDAP connection with domain : domain.com by DomainController using Kerberos only.QPM.Service.Modules.ADHelpers.dll ADHelper.ValidateCredentials() >> Failed to establish LDAP connection with domain using Kerberos only. System.DirectoryServices.Protocols.LdapException: The supplied credential is invalid." -
Causa
Environmental -
Resolución
WORKADOUND1:
Add the Primary Domain Controller (PDC) at the top of the list from the Advanced Setting in the Domain Connection.
- After logged in to PMAdmin, navigate to: General Settings > Domain Connections;
- Click Edit on the domain added, go to Advanced Settings;
- In the ‘Specify and prioritize domain controllers…’ section, click ‘Add’.
- Please select a specific DC from the list (please make sure to ping the select DC to ensure it’s reachable from the PM server) and click ‘Add’;
- Move the DC to the top of the list, using the arrows on the far right of the prompt (to access/display those, you’ll need to scroll down and then scroll right);
WORKAROUND2:
If Password Manager is hosted in Azure make sure that explicitly allow communication on the LDAP port in Azure has been set to allow the PM servers to communicate with the DCs.