Skip to content
This repository has been archived by the owner on Jun 2, 2023. It is now read-only.

Password change is very long and when it's done, I have a lot of error message #600

Closed
fredericfleury opened this issue Oct 30, 2020 · 7 comments
Labels
wontfix Problem, or not; this won't be fixed here at least.

Comments

@fredericfleury
Copy link

fredericfleury commented Oct 30, 2020

PassCore Server

  • OS: Windows

  • Provider: Active Directory

  • Settings file (without sensitive information):
    "AppSettings": {
    // The following options for AD Provider (remove if you don't use this Provider)
    "UseAutomaticContext": true, // Set true to allow PassCore to reset password using the same credentials, or false if you will fill the credentials below
    "RestrictedADGroups": [
    "Domain Admins"
    ], // Set the AD groups to restrict the use of PassCore
    "AllowedADGroups": [
    "Passcore"
    ], // Set the AD Groups to allow PassCore, if the array is empty all the groups no-restricted above are allowed
    "IdTypeForUser": "SAM", // Possible values are "DN", "GUID", "Name", "SAM", "SID" and "UPN" (Default UPN)
    "UpdateLastPassword": false, // Set true to allow PassCore to update the last password timestamp
    // The following options are for LDAP Provider (remove if you don't use this Provider)
    "LdapSearchBase": "dc=xx,dc=xx,dc=xx,dc=xx",
    "LdapSecureSocketLayer": false, // Default for AD is true when using LDAPS 636
    "LdapStartTls": true, // Default for AD is true when using LDAP 389
    "LdapChangePasswordWithDelAdd": false,
    "LdapSearchFilter": "(sAMAccountName={Username})", // Another value: "(&(objectClass=person)(cn={Username}))"
    // General options (valid for both providers)
    "LdapHostnames": [ "xx.xx.xx.xx.xx" ], // Set your hostname(s)
    "LdapPort": 389, // Default for AD is 389, for LDAPS 636
    "LdapUsername": "xxxx", // Set the username or distinguish name (DN) to bind the LDAP server
    "LdapPassword": "xxxx", // Set the password for the username
    "DefaultDomain": "xxxxxxxxxx" // Set your default AD domain here, or non "@" logins will not work! Use empty value to allow user to set the domain. This option is ONLY available with UPN.
    },

  • Log file (without sensitive information):
    info: Unosquare.PassCore.PasswordProvider.PasswordChangeProvider[0]

    PerformPasswordChange for user test-user2
    

warn: Unosquare.PassCore.PasswordProvider.PasswordChangeProvider[0]

  The User principal password cannot be changed and setPassword won't be called

warn: Unosquare.PassCore.PasswordProvider.PasswordChangeProvider[0]

  The specified network password is not correct. (0x80070056)

Describe the bug
When I launch a password reset, it took a very long time (at least 2 minutes, but sometimes more).
After displaying the message of success, I have a lot of messages "Failed due to password complex policies: New password length is shorter than AD minimum password length".
When I watched the log, I have a lot of tries to change password and a lot of warning messages.
In my last log I have 3330 times "PerformPasswordChange for user test-user2" and 3325 "The specified network password is not correct. (0x80070056)".
I have the same behaviour with ldaps.

Note: If you want to report an issue of passcorepro, please use the proper bug report form at https://store.unosquare.com/passcorepro

Desktop (please complete the following information):

  • OS: Windows 10
  • Browser : Whale, Chrome, Firefox
  • Version [e.g. 22] : all in last version.
@postheimer
Copy link

same problem, the right is correct

sometime its work at the first time and sometime he loop on chrome

image

@fredericfleury
Copy link
Author

I stopped debugging this issue.
I try a passcore pro version and it works better.

@postheimer
Copy link

i have purchases the passcore pro too , but i dont understand , the website is a manager of ad for admin users

i search a website for users change itself the password

@fredericfleury
Copy link
Author

i have purchases the passcore pro too , but i dont understand , the website is a manager of ad for admin users

i search a website for users change itself the password

Hi,
you can hide the management of AD account, and only authorize the password change : Branding -> Use single Form mode.
As it said in the application : If this feature is activated, the Web App will be transformed into a form with the only purpose and functionality of changing the user password.

@postheimer
Copy link

postheimer commented Nov 16, 2020 via email

@jjblack
Copy link

jjblack commented Nov 24, 2020

This sounds like a duplication of #598

@stale
Copy link

stale bot commented Jan 23, 2021

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the wontfix Problem, or not; this won't be fixed here at least. label Jan 23, 2021
@stale stale bot closed this as completed Feb 24, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
wontfix Problem, or not; this won't be fixed here at least.
Projects
None yet
Development

No branches or pull requests

3 participants