Re: Validating Old Passwords Before Changing Them

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Yeah, it tells you the problem but I don't think it gives you a way to fix
it. You can't change the password as part of that call, so I'm not actually
what combo of calls can be used to actually make the problem go away. I
wish I understood how this works in GINA. It is a weird chicken and egg
problem that they seem to have a solution to that we don't. :)

At least it provides a useful error message. LDAP really should.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--

Thanks for the reply.

LogonUser appears to work, in that it still returns non-zero, but
GetLastWin32Error() will return "ERROR_USER_MUST_CHANGE_PASSWORD" if
the password is valid, and the users password must change. I think
this is the only approach.

-Alan


.



Relevant Pages

  • Re: Why got error "Only one type of operation can be performed in
    ... You might check the versions of your ADSI DLLs and see if there is any ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... the fix per your suggestion did fix the problem. ...
    (microsoft.public.dotnet.security)
  • Re: Web Single Sign On
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... current Windows credentials to the server, ... This common identity is the user's username used to logon to the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Changing ADAM user password
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Running the bind from another W2K3SP1 machine ... support in digest or something like that. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ASP.NET 2.0 WindowsTokenRoleProvider Local Groups Broken
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... There is no Group property on the WindowsIdentity object in .NET 2.0, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Secure SSL with LDAP and AD
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP over SSL with a third-party certification authority. ... Note that a self signed cert is probably a very poor choice as nothing ...
    (microsoft.public.windows.server.security)