History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: QB-4186
Type: Bug Bug
Status: Closed Closed
Resolution: Won't Fix
Priority: Major Major
Assignee: Robin Shen
Reporter: Phong Trinh
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
QuickBuild

An issue with authenticating users through Active Directory

Created: 16/Jun/25 12:53 AM   Updated: 24/Jun/25 02:46 PM
Component/s: None
Affects Version/s: 14.0.28
Fix Version/s: None

Original Estimate: Unknown Remaining Estimate: Unknown Time Spent: Unknown
Environment: Linux


 Description  « Hide
Our QuickBuild server is configured to authenticate users through Active Directory. However, some users have updated their domain passwords but are unable to log into the server using the new credentials—their previous passwords remain functional instead. Please advise.

 Thanks,
ptrinh

 All   Comments   Work Log   Change History      Sort Order:
Robin Shen [16/Jun/25 01:30 AM]
Are they login via web UI? If so, please make sure the password takes effect, as the error is reported by AD.

Phong Trinh [16/Jun/25 01:39 AM]
They are attempting to log into QuickBuild through the web UI, but the new credentials are not working. However, since they can successfully log into their desktops using the same credentials, it confirms that the passwords have taken effect.
 

Robin Shen [16/Jun/25 01:44 AM]
I am not sure what happens at AD side, as QB simply sends user credential to AD to be authenticated. You may test with some LDAP tool (https://jxplorer.org/) to bind as user DN and password, and I guess it won't work also.

Phong Trinh [16/Jun/25 02:35 AM]
Is there any cache that needs to be cleaned on user or server side?
I will download the tool and test it.
Thanks

Robin Shen [16/Jun/25 02:36 AM]
No any cache need to be cleared.

Phong Trinh [19/Jun/25 02:18 AM]
I logged into QuickBuild using my domain user credentials and went to the 'My' tab to update the password to something like temp123. I confirmed that the 'Authenticator' was set to Active Directory, as specified in the Security Settings. After logging out, I was able to log back in with the new password.
However, it appears that my domain user account is now being treated as a local QuickBuild user, and authentication is no longer being routed through Active Directory.


Robin Shen [19/Jun/25 03:26 AM]
If you specified password for your account, you can login with both passwords. If input new password, local database will be used to authenticate user, and for old password, AD will be used. However once you login via AD, your specified password will be overriden with AD password in local database (password hash actually stored in local database).

Phong Trinh [24/Jun/25 12:41 AM]
We figured out the issue. It was with the bind user specifically its alias domain. Thank you for your help!

Robin Shen [24/Jun/25 02:46 PM]
No problem

Change by Robin Shen [24/Jun/25 02:46 PM]
Field Original Value New Value
Status Open [ 1 ] Closed [ 6 ]
Resolution Won't Fix [ 2 ]