<< Back to previous view

[QB-4186] An issue with authenticating users through Active Directory
Created: 16/Jun/25  Updated: 24/Jun/25

Status: Closed
Project: QuickBuild
Component/s: None
Affects Version/s: 14.0.28
Fix Version/s: None

Type: Bug Priority: Major
Reporter: Phong Trinh Assigned To: Robin Shen
Resolution: Won't Fix Votes: 0
Remaining Estimate: Unknown Time Spent: Unknown
Original Estimate: Unknown
Environment: Linux


 Description   
Our QuickBuild server is configured to authenticate users through Active Directory. However, some users have updated their domain passwords but are unable to log into the server using the new credentials—their previous passwords remain functional instead. Please advise.

 Thanks,
ptrinh

 Comments   
Comment by Robin Shen [ 16/Jun/25 01:30 AM ]
Are they login via web UI? If so, please make sure the password takes effect, as the error is reported by AD.
Comment by Phong Trinh [ 16/Jun/25 01:39 AM ]
They are attempting to log into QuickBuild through the web UI, but the new credentials are not working. However, since they can successfully log into their desktops using the same credentials, it confirms that the passwords have taken effect.
 
Comment by Robin Shen [ 16/Jun/25 01:44 AM ]
I am not sure what happens at AD side, as QB simply sends user credential to AD to be authenticated. You may test with some LDAP tool (https://jxplorer.org/) to bind as user DN and password, and I guess it won't work also.
Comment by Phong Trinh [ 16/Jun/25 02:35 AM ]
Is there any cache that needs to be cleaned on user or server side?
I will download the tool and test it.
Thanks
Comment by Robin Shen [ 16/Jun/25 02:36 AM ]
No any cache need to be cleared.
Comment by Phong Trinh [ 19/Jun/25 02:18 AM ]
I logged into QuickBuild using my domain user credentials and went to the 'My' tab to update the password to something like temp123. I confirmed that the 'Authenticator' was set to Active Directory, as specified in the Security Settings. After logging out, I was able to log back in with the new password.
However, it appears that my domain user account is now being treated as a local QuickBuild user, and authentication is no longer being routed through Active Directory.

Comment by Robin Shen [ 19/Jun/25 03:26 AM ]
If you specified password for your account, you can login with both passwords. If input new password, local database will be used to authenticate user, and for old password, AD will be used. However once you login via AD, your specified password will be overriden with AD password in local database (password hash actually stored in local database).
Comment by Phong Trinh [ 24/Jun/25 12:41 AM ]
We figured out the issue. It was with the bind user specifically its alias domain. Thank you for your help!
Comment by Robin Shen [ 24/Jun/25 02:46 PM ]
No problem
Generated at Wed Sep 17 06:40:49 UTC 2025 using JIRA 189.