mprahl / adreset Goto Github PK

I have successfully connected to one of the domain controllers with SSL on port 636. The next step of the process is setting up the system settings, however it does not see any of the security groups inside of Active Directory. Our organization uses sub OU's inside of AD with users, and groups inside of each OU. This is running on 2016 Active Directory with pre-windows 2000 deactivated. Any ideas?

The tool does not allow/recognize a trailing space at the end of passwords - I tried to change my pw to one with exactly the minimum of 8 chars (incl. lower, upper & numbers + special ) which had a space as the last character. Yet the UI complained about insufficient complexity.

Also tried to set a pw with a space somewhere "inside" the password which does work.
Also it allows to set a pw which starts with space.

Hi,

I found another issue. I'm trying to tackle them, but i'm not very strong when it comes to classes and functions. I'm setting up ADReset and when I'm setting up an admin group, I get the following error:

[Mon Oct 01 04:32:25.705508 2018] [php7:warn] [pid 13411] [client XXXXXX:50840] PHP Warning: ldap_search(): Search: Operations error in /var/www/pwreset/resources/classes/AD.php on line 93, referer: http://XXXXXX/settings/systemsettings.php

Line 93 appears to be grabbing the baseDN and a query. Not sure how they work, any help is greatly appreciated.

Also, I updated the function for mcrypt since it's depreciated and changed it to openssl. Would you want me to do a pull request and have you review it and maybe push it?

Hello,

When I initially setup ADReset I didn't have SSL enabled, however I went back and enabled SSL and is working as expected when loading pages,browsing,etc. However whenever ADReset needs to authenticate a user against AD to login it throws the error "The Username or Password is incorrect.
Please try again."

If I go to the site without SSL I'm able to login with the same credentials that just failed.

Hello, If I have the check mark "The user must change the password at the next login", AD reset does not work, since he cannot change the password, how can I fix it so that the password can still be changed?

Hi,

I know you're busy, but I had a question for you in regards to connecting an AD server. I'm running ADReset on a centos box. When trying to connect to the AD server, I get the following error: The Active Directory connection was not successful. Please check your settings.

I checked the error logs, but it has no entries. Do you know a way I can enable debugs to see the exact error to try and tackle that?

Thanks!

Hi!
During the initial setup, I cannot connect to AD.
I see this error in the logs, can you tell me what to do?

[ssl:warn] [pid 27942] AH01909: RSA certificate configured for 127.0.1.1:443 does NOT include an ID which matches the server name
[ssl:warn] [pid 27943] AH01909: RSA certificate configured for 127.0.1.1:443 does NOT include an ID which matches the server name

I got the ADReset up and running. But I encountered an error when using the RESET WITH QUESTIONS, after entered a username, it came up error 'There was a database error. Please try again'.

All Q&A and done. Database is connected. I even tried on both Windows Server and UBUNTU platform. The result is the same.

Got any ideas???

If my Win 2008R2 does not have the SSL in ldap works ??

@good afternoon, with the same error, can you help me, please?

PHP Notice: Undefined offset: 0 in C:\inetpub\adreset\resources\classes\AD.php on line 432
PHP Warning: Invalid argument supplied for foreach() in C:\inetpub\adreset\resources\classes\AD.php on line 434
PHP Notice: Undefined index: dn in C:\inetpub\adreset\resources\classes\AD.php on line 400
PHP Notice: Undefined index: name in C:\inetpub\adreset\resources\classes\AD.php on line 400

Good afternoon! in the email questionnaire which variable must be included to send the correct password change link?

Hello,

I have problem with restart forgot passowrd by secret questions. When i add 3 sercret questions and set 3 answers to them everything work correct. But after three days i can't chanege my password using secret questions and i get information "Your answers are not correct on your secret questions". When i change password in AD and i set new answers everything repeats again after three days. Other functions are working correctly. Of course, I give the right answers.

Thank you for your help.

Hello, is there a way to have the system use the users UPN vs legacy user logon name? Thanks!

I am interested in this application and would like to use it, but since there is no license display, I am not sure whether to modify it or not.

Is it possible to get an MIT license etc.?

thanks.

Hi Matt,

I am getting an Error .The AD connection was not successful. Please check your settings. Nothing blocking the communication. I Can also telnet to the domain controller on port 636

Hello Owner

I'm running ADReset on a Windows Server 2012 R2. When trying to connect to the AD server, I get the following error: The Active Directory connection was not successful. Please check your settings.

I checked the error logs, but it has no entries. Do you know a way I can enable debugs to see the exact error to try and tackle that

I configured ADReset in a fresh Ubuntu 18.04.2 installation. Now I'm trying to use the reset through e-mail, and after clicking the link in the e-mail and typing the new password the error "The password could not be reset. Please make sure the password meets the password policy standards." is presented.

In apache error.log the following error is presented: PHP Warning: ldap_mod_replace(): Modify: Insufficient access in /var/www/adreset/resources/classes/AD.php on line 196, referer: https:///newpw.php?id=<random_string>

Hello,

I'm getting this error - "The Active Directory connection was not successful.Please check your settings."

My setup is on CentOS 7 and have followed the instructions guide as well.

I've added "TLS_REQCERT never" also in my conf file.

Please advise.

Is it possible to reset the admin pasword ?

Thanks for your work , really hatsoff
Do i need to register 5.50 PHP as download fails for PHP from Microsoft Web Platform Installer, if you correct me which version of PHP need to install

good afternoon Matt Prahl,

get to perform configure confers procedure in Installing ADReset on Ubuntu 14.04, but now I'm having problems I need to change the language to Portuguese in the pages,
I basically need only some fields that read the AD,
we are thinking of changing the password and confirm and ask the user to change the password information of the AD field.
The ADRESET tool can do this.

I at the final stage where I attempt to fill in the LDAPS details. and then I get this error:

The Active Directory connection was not successful. Please check your settings.

I had use LDP utility and found no problem connecting to the AD.

Is there a way in the ADRESET to see what is going on and why I am unable to connect to AD via LDAPS?

Hey @mprahl

Hope you are well. First of all, I want to say I really like this application. Some really good work 👍

I believe I have found a vulnerability in this application.

I have tried connecting with you on LinkedIn - please reach out to me on there to discuss.

I can see from other comments that ADReset is not actively maintained and you have developed a version 2. So I understand you may not implement a fix for this. If you're happy for me to publish the findings publicly now then I'm happy to do so?

If I don't hear back from you in 1 week, I'll proceed to publish the findings as I'll assume its something that you don't want to invest anymore time in. This should hopefully then give others who have implemented this application to start working on a fix themselves if they wish to do so.

Thanks

You do not have permission to use ADReset. Please contact the Help Desk for assistance.

Is there a way to allow unauthenticated SMTP?