Logon failure: unknown user name or bad password

[GoogleCodeExporter]

Hi, I installed the rc2 version on a Windows 2003 R2 64 bits DC.
HashingPasswordFiler DLL is shown in the loaded modules but when after I
change the password for a test user, the log shows the following

[2010/05/20 03:34:12:515]:Error during the modification of the entry with
dn= CN=Google Apps Student
Test,OU=TestGapps,OU=Students,DC=cmsfq,DC=edu,DC=ec: Invalid Syntax
[2010/05/20 03:34:12:531]:Change failed for user "gappsstudent"
[2010/05/20 03:34:12:531]:Logon failure: unknown user name or bad password.

My .ini settings are as follows. Administrador is a Domain Administrator
for testing purposes
[Main]
;name of you google apps
appsDomain=cmsfq.edu.ec
;name and password of an administrator accoutn of google apps
appsAdmin=helpdesk@cmsfq.edu.ec
appsPasswd=helpdeskpassword
;DN and password of an AD user that can write the “hashedPassword” field
ldapAdminBindDn=CN=Administrador,CN=Users,DC=cmsfq,DC=edu,DC=ec
ldapAdminPasswd=AdministradorPassword
;LDAP query to find your AD users
ldapSearchBaseDn="OU=TestGapps,OU=Students,DC=cmsfq,DC=edu,DC=ec"
;path of sync application executable (GoogleHashUpdater.exe)
processPath=C:\windows\GoogleHashUpdater.exe
;name and password of a local account to use to run the sync application
processUser=Administrador
processPasswd=AdministradorPassword

Thanks in advance for your help

Xavier Villafuerte

Original issue reported on code.google.com by xavier.v...@gmail.com on 20 May 2010 at 3:40

[GoogleCodeExporter]

After playing with credentials, now I am getting the following error instead of 
the 
above. 
12:03:53:484]:Error during the modification of the entry with dn= CN=Google 
Apps 
Student Test,OU=TestGapps,OU=Students,DC=cmsfq,DC=edu,DC=ec: Invalid Syntax
[2010/05/23 12:03:53:484]:Change failed for user "gappsstudent"

What syntax is wrong?

Original comment by xavier.v...@gmail.com on 23 May 2010 at 12:07

[GoogleCodeExporter]

I've tried to reproduce your problem but I wasn't able to.
The invalid syntax is the error message produced by the "ldap_modify" system 
call,
the problem is that the string that gives the error "CN=Google Apps Student
Test,OU=TestGapps,OU=Students,DC=cmsfq,DC=edu,DC=ec" is the result of another 
system
call, so I don't know what is the error and why it returns a wrong string.

You could try to create another non-administrator user and try to see if it 
gives the
same error.

Original comment by ciak...@gmail.com on 24 May 2010 at 8:22

[GoogleCodeExporter]

I have a very similar issue.  I followed the setup instructions word for word 
and am 
getting the error message below in my log when I change passwords for users.
My syncuser can browse the directory with an ldap browser.  Can also see the 
hashedPassword attribute.  I have experimented with the domain administrator 
account 
too with the same result.  

My ini file is listed below:

[Main]
;name of you google apps
appsDomain=scred.k12.mn.us
;name and password of an administrator account of google apps
appsAdmin=somebody@scred.k12.mn.us
appsPasswd=password
;DN and password of an AD user that can write the “hashedPassword” field
ldapAdminBindDn=CN=somebody,CN=Users,DC=scred,DC=k12,DC=mn,DC=us
ldapAdminPasswd=password
;LDAP query to find your AD users
ldapSearchBaseDn=CN=SCRED,DC=scred,DC=k12,DC=mn,DC=us
;path of sync application executable (GoogleHashUpdater.exe)
processPath=C:\Windows\GoogleHashUpdater.exe
;name and password of a local account to use to run the sync application
processUser=somebody
processPasswd=password

[2010/06/05 19:39:11:074]:Error during quering sAMAccountName=bmoffet: 
Operations 
Error
[2010/06/05 19:39:11:074]:Change failed for user "bmoffet"
[2010/06/05 19:39:11:074]:The parameter is incorrect.

[2010/06/05 19:39:11:074]:The parameter is incorrect.

Any ideas?

I am on a 2003 amd64 domain controller, have followed the setup instructions on 
both 
of my domain controllers.

Original comment by bmof...@gmail.com on 5 Jun 2010 at 7:50

[GoogleCodeExporter]

I'm working on it, soon I'll post an updated version of the filter with better
logging to pin down the error.

Original comment by ciak...@gmail.com on 7 Jun 2010 at 12:51

• Changed state: Started

[GoogleCodeExporter]

After searching some more I think your problem is due to the fact that you have 
more than one Domain Controller, all the test I have done till now used only 
one DC.

Soon I'll build a special version for you to test if I were right.

Original comment by ciak...@gmail.com on 8 Jun 2010 at 9:54

[GoogleCodeExporter]

Thank you for your quick response.  Are you aware of any cases where this 
filter is working on a 64bit 2003 domain controller?

Original comment by bmof...@gmail.com on 12 Jun 2010 at 2:34

[GoogleCodeExporter]

Yes, it works on 64 bit AD...

Original comment by giorgio....@gmail.com on 23 Jun 2010 at 8:17

• Changed state: Fixed