topic Re: Chenge expired password in AD via EndPoint in SASE and Remote Access

Chenge expired password in AD via EndPoint

Nbto — Wed, 22 Jan 2020 11:08:36 GMT

Hello,

I got a problem with changing expired password in Active Directiory by Remote Access (VPN SSL port 636).

When I try to change password I got an error "Failed to modify password, LDAP error".

What can by the source of the problem, I tried to modify user policies which is integrated with CheckPoint - doesn't solved the problem. Ofcourse, I tried solution from this SK:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk40735.

Didn't help.

I will appreciate any suggestions.

Thank you,

Nbto

Re: Chenge expired password in AD via EndPoint

G_W_Albrecht — Wed, 22 Jan 2020 14:03:59 GMT

Tried this one already ? sk89841: How to configure password change after expiration (LDAP) for Mobile Access and Remote Access clients

Re: Chenge expired password in AD via EndPoint

Nbto — Wed, 22 Jan 2020 14:05:37 GMT

Yep, position nr. 8 helped. Thank you ! 🙂

Re: Chenge expired password in AD via EndPoint

rdemartini — Tue, 26 May 2020 19:18:12 GMT

We're having the same issue. What exactly is nr. 8?

We were unable to make the schema change as it comes back saying it's read only.

Re: Chenge expired password in AD via EndPoint

abihsot__ — Wed, 27 May 2020 14:53:41 GMT

if it is complaining about being read-only check if you have write permissions enabled on account unit:

Re: Chenge expired password in AD via EndPoint

rdemartini — Wed, 27 May 2020 15:07:05 GMT

I was able to change the schema and save it. Now the user can change their password and then it says "Negotiation With Site Failed". Now the password was actually changed successfully but then the user can no longer connect to the VPN.

Going directly into the AD and changing it back does no good. No matter what the user (test user) can no longer hit the VON with the negotiation error.

Any help is appreciated.

Re: Chenge expired password in AD via EndPoint

Bharat_Sudi — Fri, 15 Jan 2021 06:07:18 GMT

Dear Albrecht,

Even Our customer is also facing the same issue.

They are not able to change windows domain password for remote vpn users and followed sk89841 and sk33404, which is not working.

But they are able to change windows domain password for LAN users.

I have attached the screenshot for your reference.

Regards,

Bharat Sudi