Return
-
Title
User search returns no results in PMSelfService. Verbose logging shows the error "Invalid Credentials for Domain" and "DsBindWithCred failed with error 5: Access is denied." -
Description
PRESENTATION 1
After upgrading from Password Manager 5.9.x, the User search in the PMSelfService site fails to return any users.
There is no error in the PMSelfService site.
Verbose logging for the Password Manager service shows errors like:
E [3008:18] QPM.Service.Modules.ADHelpers.dll ErrorContextInterceptionBehavior.Invoke() >> PublishConnectionPoint raises exception: 'DsBindWithCred failed with error 5: Access is denied.
AND/OR
E [3008:32] QPM.Service.Modules.ADHelpers.dll ADHelper.CreateLdapConnection() >> Invalid Credentials for Domain: xxxx
E [3008:32] QPM.Service.Modules.ADHelpers.dll ErrorContextInterceptionBehavior.Invoke() >> GetContainer raises exception: 'The server could not be contacted.'
Re-entering the credentials in the domain connection is successful, but the issue persists.
PRESENTATION 2
Users can be found in the PMSelfService site, but attempting to reset the password for an expired account or for a user with the User must change password at next logon flag set fails with the error:
DsBind failed with error 5: Access is denied. (0x00000005) -
Cause
This issue is being tracked as Defect ID 437281. -
Resolution
WORKAROUND
Enter the domain management credentials in UPN format i.e. user.name@domain.local
STATUS
Waiting for fix in a future release of Password Manager. -
Change Request
437281