Forum Discussion
rgordon_01
Nimbostratus
NimbostratusCan't change AD password through APM
Access policy uses AD Auth for authentication. AD AAA is using a pool with 2 members. I have priority group enabled. In the apm log it shows AD module: change password for 'username' failed: Passw...
Try doing a packet capture while you are attempting the password change operation. I seem to recall was a very old defect where password changes failed when UDP 464 was blocked, and 11.5.1 is quite old. So perhaps this is the cause of the problem.
In any case, a packet capture should reveal the problem easily. Filter on port 464 (kpasswd), 88 (krb), and 53 (dns).
rgordon_01Nimbostratus
NimbostratusMy mistake. It actually does work using a pool. The issue was due to a group policy not allowing a password to be changed again within a 24 hour period. Just so happened both the accounts we tried from already had the password changed that day. Sorry for the confusion. thanks!
