Chenge expired password in AD via EndPoint

[Nbto]

Hello,

I got a problem with changing expired password in Active Directiory by Remote Access (VPN SSL port 636).

When I try to change password I got an error "Failed to modify password, LDAP error".

What can by the source of the problem, I tried to modify user policies which is integrated with CheckPoint - doesn't solved the problem. Ofcourse, I tried solution from this SK:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut....

Didn't help.

I will appreciate any suggestions.

Thank you,

Nbto

[G_W_Albrecht · Accepted solution]

Tried this one already ? sk89841: How to configure password change after expiration (LDAP) for Mobile Access and Remote Acces...

[Nbto]

Yep, position nr. 8 helped. Thank you ! 🙂

[rdemartini]

We're having the same issue. What exactly is nr. 8?

We were unable to make the schema change as it comes back saying it's read only.

[abihsot__]

if it is complaining about being read-only check if you have write permissions enabled on account unit:

[rdemartini]

I was able to change the schema and save it. Now the user can change their password and then it says "Negotiation With Site Failed". Now the password was actually changed successfully but then the user can no longer connect to the VPN. 

Going directly into the  AD and changing it back does no good. No matter what the user (test user) can no longer hit the VON with the negotiation error.

Any help is appreciated.

[Bharat_Sudi]

Dear Albrecht,

Even Our customer is also facing the same issue.

They are not able to change windows domain password for remote vpn users and followed sk89841 and sk33404, which is not working.

But they are able to change windows domain password for LAN users.

I have attached the screenshot for your reference.

Regards,

Bharat Sudi