Doubt ldap password change

[Cristian Silva]

I'm desenvovendo an API to enable the User to change their password in AD through the windows of my application. Today I make this change when the user is not returning error 773 (user must reset password). My doubt this at this point. I can make this change password for users who need to change password at first logon? By java when I make connection 636 (SSL) with these users, Retorn me expecption 773. As is done in this case? How can I change an attribute if I can not Logor? Need to login with administrator password and then change these users? Can you help me with this question please.

thank you

Cristian

[K. Tsang]

Interesting haven't come across this.

The ldap code really say 773 (reset password)? Or authentication failed (some other code) which can mean the account is locked (needs unlocking) or the password is indeed expired (need changing)?

[K. Tsang]

And welcome to the Ranch

[Cristian Silva]

K. Tsang wrote:Interesting haven't come across this.

The ldap code really say 773 (reset password)? Or authentication failed (some other code) which can mean the account is locked (needs unlocking) or the password is indeed expired (need changing)?

K. Tsang

Yes, the return code 773 is an exception. Authentication was successful and returns me 773 ldap "user must reset password". The password needs to be changed, is that a new User with default password and need to change it at first logon.

thank you

Cristian

[K. Tsang]

Well I don't know if it's a good idea to change the password directly in Java directly, because it looks lots of setting up to do (eg ssl, trusting with AD DC).

However, if you must, I see there are 2 ways: 1) change it in Java through console or GUI or something or 2) submit Windows command directly to AD server.

Either way having the DC/admin user right is simpler.

You may want to Google a bit. There are sample code (option 1) that shows how to do it but I never tried them so don't know it they work.