Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Jul 22, 2015

Citrix iApp and Active Directory

According to AD policy, the user is required to change their password every so many days. When logging in to Citrix via the APM logon page, the user receives the message:   "The domain password ha...
BIG-IP Access Policy Manager (APM)
devops
iApps
security
Greg_Crosby_319's avatar
Greg_Crosby_319
Historic F5 Account
Jul 22, 2015

Might be you are using an older version of the Citrix iApp, the latest Citrix iApp (citrix_vdi.v.2.1.0) has the option to enter multiple ad servers.

 

Password changes require a user account with administrative privileges to be present in the APM AAA profile. Verify "Yes...." was selected for question "Does your Active Directory domain require credentials?" if using the iApp to configure your AAA AD profile. If you manually built the AAA profile, verify an admin account and proper password has been entered.

 

To help troubleshoot, you can enable "Complexity check for Password Reset" and "Show Extended Error" within your access policy ad auth policy item. Doing so will display a more decipherable error message during logon and could help pin point where the failure resides.