Comments on: SquirrelMail Active Directory Change Password Howto

By: consultant

consultant — Wed, 07 Jan 2009 20:42:28 +0000

Hi xuanpd,

Please see my reply to terry, comment #6

By: xuanpd

xuanpd — Wed, 07 Jan 2009 10:53:36 +0000

I received the same error as Terry’s:
The request contains a value which does not meet with certain constraints.
This result can be returned as a consequence of

* The request was to add or modify a user password, and the password fails to
meet the criteria the server is configured to check. This could be that the
password is too short, or a recognizable word (e.g. it matches one of the
attributes in the users entry) or it matches a previous password used by
the same user.

* The request is a bind request to a user account that has been locked.

Thank you very much.

By: consultant

consultant — Tue, 18 Nov 2008 02:08:31 +0000

You may have deactivated the change password plugin.

If you would like to see it in the SquirrelMail login page, set $changePasswdInLogin = 1 in /usr/share/squirrelmail/plugins/change_passwd/config.php

By: arkosaso

arkosaso — Mon, 17 Nov 2008 02:59:46 +0000

hi,
thx for you afford. but my next problem is the site ‘change password’ doesn’t show up in the browser. did i something wrong? or did i miss something? thx for your help!

By: consultant

consultant — Sat, 15 Nov 2008 09:08:34 +0000

Hi arkosaso,

Your right, the change password is no longer working in Active Directory. It turns out the SSL certificate was not even needed in the first place. Please download the new version, it should now work.

By: arkosaso

arkosaso — Thu, 13 Nov 2008 18:01:02 +0000

hi,
well, i set $hosts with the hostname of the AD server, and i set $domain with the domain.
i can ping the hostname of the AD from the linux machine.
for the domain, should i write in capital letter or not? might that the problem?
thx for your help!

By: consultant

consultant — Wed, 12 Nov 2008 12:59:42 +0000

Hi arkosaso,

You need to set $hosts and probably $domain. See ldap-chpasswd.cfg.sample for more details

By: consultant

consultant — Wed, 12 Nov 2008 12:55:53 +0000

Hi terry,

Make sure that the new password meets whatever password policy has been configured in Active Directory. The password policies are:

Enforce password history
Maximum password age
Minimum password age
Minimum password length
Password must meet complexity requirements

By: arkosaso

arkosaso — Wed, 12 Nov 2008 04:23:17 +0000

“Your host name was not auto detected, you have to configure it manually. Please see step 5.”
sorry for my dumb question,what should i edit in file ldap-chpasswd.cfg? i can not find a hint about hostname in the file ldap-chpasswd.cfg.
thank you for your help.

By: terry

terry — Tue, 11 Nov 2008 19:56:26 +0000

everything went well, just the last part, ldap-chpasswd does not work, both in squirrelmail and command line, the error is
The request contains a value which does not meet with certain constraints.
This result can be returned as a consequence of

* The request is a bind request to a user account that has been locked

‘ldap-chpasswd username password’ got no error, anyone can help to explain what does the error above means.