Re: Force password change on next login with Active Directory

2021-05-19 Thread Emmanuel Lécharny
On 19/05/2021 12:26, 4 Integration wrote: Hi again, I noted that when using LdapConnectionTemplate and authenticate(...) it doesn't return any useful error codes in the exception and no PasswordWarning. Shouldn't this scenario return a PasswordWarning?

Re: Force password change on next login with Active Directory

2021-05-19 Thread Emmanuel Lécharny
Hi, On 18/05/2021 11:03, 4 Integration wrote: Hi again, I have had a discussion with our vendor but they have difficulties to determine the underlying root cause more than error 49 (INVALID_CREDENTIALS). I made a simple Java application to test this and cannot find anything more when debugging

Re: Force password change on next login with Active Directory

2021-05-19 Thread 4 Integration
Hi again, I noted that when using LdapConnectionTemplate and authenticate(...) it doesn't return any useful error codes in the exception and no PasswordWarning. Shouldn't this scenario return a PasswordWarning?

Re: Force password change on next login with Active Directory

2021-05-18 Thread 4 Integration
Hi again, I have had a discussion with our vendor but they have difficulties to determine the underlying root cause more than error 49 (INVALID_CREDENTIALS). I made a simple Java application to test this and cannot find anything more when debugging the PasswordException. Do you have any guidance

Re: Force password change on next login with Active Directory

2021-05-06 Thread Emmanuel Lécharny
On 06/05/2021 14:08, 4 Integration wrote: @Emmanuel, sure I have a dialogue with them as well but since I know they use Apache Directory LDAP API and (most) the debug logs are from `org.apache.directory` trying to understand the behavior of LDAP API interacting with Active Directory. I would

Re: Force password change on next login with Active Directory

2021-05-06 Thread 4 Integration
@Emmanuel, sure I have a dialogue with them as well but since I know they use Apache Directory LDAP API and (most) the debug logs are from `org.apache.directory` trying to understand the behavior of LDAP API interacting with Active Directory. I would expect many other users of LDAP API facing the

Re: Force password change on next login with Active Directory

2021-05-06 Thread Emmanuel Lécharny
Hi, I will focus on the important part of your message : "We are using a commercial IdP product (Curity)" The best you can do is to ask them about the error you(ve got. On 06/05/2021 09:43, 4 Integration wrote: Hi, We are using a commercial IdP product (Curity) which in turn uses Apache

Force password change on next login with Active Directory

2021-05-06 Thread 4 Integration
Hi, We are using a commercial IdP product (Curity) which in turn uses Apache Directory API and we integrate with our Active Directory (AD). When adding new accounts/users in AD we set the flag `pwdLastSet=0` (or as in AD "User must change password at next logon") and a default password. When I