Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Jul 22, 2015

Citrix iApp and Active Directory

According to AD policy, the user is required to change their password every so many days. When logging in to Citrix via the APM logon page, the user receives the message:   "The domain password ha...
BIG-IP Access Policy Manager (APM)
devops
iApps
security
tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Jul 22, 2015

Hi Greg, Thanks for your response, I appreciate it. Also, thanks for the update for the new iApp, I think the one I'm using is from 2012.

 

I am using the iApp and I dont see the question in the Iapp you posted, ""Does your Active Directory domain require credentials?". But I do have a user account listed and I'm not sure what they mean by it must have "administrative permissions", perhaps domain admin group?

 

I did enable "Complexity check for Password Reset" and "Show Extended Error" and thats how I was able to see the session ID and see that error I posted ""AD module: change password for "username" failed: (1588592656)."

 

Note however, that users can login no problem, its just when AD forces them to change their passwords they cant.

 

Maybe I'll update the iApp and see what happens.