You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@guacamole.apache.org by "Gary V (Jira)" <ji...@apache.org> on 2021/02/23 13:46:00 UTC
[jira] [Updated] (GUACAMOLE-1296) Guacamole rejects code 773
response from Windows Server 2019 ActiveDirectory
[ https://issues.apache.org/jira/browse/GUACAMOLE-1296?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gary V updated GUACAMOLE-1296:
------------------------------
Description:
Guacamole login fails when a user is required to set a new AD password after first login.
When a user logs in, AD returns code 773, which implies the authorization is correct but a new password must be set immediately in the remote session.
Guacamole login fails.
Error from catalina.out:
{{Message ID : 1}}
{{ BindResponse}}
{{ Ldap Result}}
{{ Result code : (INVALID_CREDENTIALS) invalidCredentials}}
{{ Matched Dn : ''}}
{{ Diagnostic message : '80090308: LdapErr: DSID-0C090439, comment: AcceptSecurityContext error, data 773, v4563^@'}}
was:
Guacamole login fails when a user is required to set a new AD password after first login.
When a user logs in, AD returns code 773, which implies the authorization is correct but a new password must be set immediately in the remote session.
Guacamole login fails.
The error line from catalina.out:
{{20:12:49.961 [NioProcessor-2] DEBUG o.a.d.a.l.c.a.l.StoreErrorMessage - MSG_05106_ERROR_MESSAGE_IS (80090308: LdapErr: DSID-0C090439, comment: AcceptSecurityContext error, data 773, v4563^@)}}
> Guacamole rejects code 773 response from Windows Server 2019 ActiveDirectory
> ----------------------------------------------------------------------------
>
> Key: GUACAMOLE-1296
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-1296
> Project: Guacamole
> Issue Type: Bug
> Components: guacamole-auth-ldap
> Affects Versions: 1.3.0
> Reporter: Gary V
> Priority: Minor
>
> Guacamole login fails when a user is required to set a new AD password after first login.
> When a user logs in, AD returns code 773, which implies the authorization is correct but a new password must be set immediately in the remote session.
> Guacamole login fails.
>
> Error from catalina.out:
> {{Message ID : 1}}
> {{ BindResponse}}
> {{ Ldap Result}}
> {{ Result code : (INVALID_CREDENTIALS) invalidCredentials}}
> {{ Matched Dn : ''}}
> {{ Diagnostic message : '80090308: LdapErr: DSID-0C090439, comment: AcceptSecurityContext error, data 773, v4563^@'}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)