Comments (3)
Active Directory requires a secure connection to change passwords, e.g. One of SecurityTLS
, SecurityStartTLS
, SecurityInsecureTLS
, SecurityInsecureStartTLS
, though the last two are discouraged unless absolutely necessary.
I've added a hint to the example explaining such in v3.1.2.
from go-ad-auth.
Those errors indicate that you don't have TLS set up for Active Directory. If you want to change passwords, you'll at least need to add a self-signed certificate and use an auth.SecurityInsecure*
method. Obviously a legitimate certificate (from say, Let's Encrypt) is better because it protects you from man in the middle attacks.
This may be of some help: https://serverfault.com/questions/508853/how-to-setup-ssl-for-active-directory
from go-ad-auth.
Security: auth.SecurityNone,
Unable to modify password: LDAP Result Code 53 "Unwilling To Perform": 00002077: SvcErr: DSID-03190EBE, problem 5003 (WILL_NOT_PERFORM), data 0
Security: auth.SecurityTLS,
Connection error: LDAP Result Code 200 "Network Error": read tcp 172.22.57.94:35218->192.168.71.17:389: read: connection reset by peer
Security: auth.SecurityStartTLS,
Connection error: LDAP Result Code 52 "Unavailable": 00000000: LdapErr: DSID-0C0912C4, comment: Error initializing SSL/TLS, data 0, v3839
Security: auth.SecurityInsecureTLS,
Connection error: LDAP Result Code 200 "Network Error": read tcp 172.22.57.94:35230->192.168.71.17:389: read: connection reset by peer
Security: SecurityInsecureStartTLS,
Connection error: LDAP Result Code 52 "Unavailable": 00000000: LdapErr: DSID-0C0912C4, comment: Error initializing SSL/TLS, data 0, v3839
No one of methods worked for me.
from go-ad-auth.
Related Issues (13)
- Authenticates multiple passwords HOT 3
- Unable to change password with TLS not enabled in domain
- Escape LDAP filter arguments HOT 5
- adauth.AuthenticateExtended call is not returning an expected ldap group HOT 1
- Connection error: LDAP Result Code 2 "Protocol Error": unsupported extended operation HOT 3
- Wrong keyword HOT 1
- Authentication on LDAP over TLS does not work HOT 2
- Thanks for package HOT 1
- LDAP Error : Amount Of Entries Returned was not one. HOT 5
- Get user groups HOT 6
- checking other users username and password HOT 2
- ObjectGroups HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from go-ad-auth.