Modify AD user password times error by modifying AD user's tools through Java development

Today, with 1 user feedback issues, they developed a tool (modifying the ad user password) through Java, in which an error occurs when the LDAP points to 1 secondary DCs, with the following details:

Problem Description:

=========

through JAVA developed a tool to modify the AD user password,LDAP points to 1 auxiliary domain controls, Modify the user password error,JAVA report error as follows:

Javax.naming.CommunicationException:simple Bind failed:

10.10.10.23:636 [Root exception is

Javax.net.ssl.SSLHandshakeException:sun.security.validator.ValidatorException:PKIX Path Building failed: Sun.security.provider.certpath.SunCertPathBuilderException: Unable to find valid certification path to requested Target]

    

Cause Analysis:

=========

Pass to escalate the error: Unable to find valid certification path to requested target, The problem is roughly judged on the certificate, by checking this auxiliary domain control Event Log, the following error is found:

650) this.width=650; "Width=" 622 "height=" 398 "title=" image "style=" border-right-width:0px;background-image:none; border-bottom-width:0px;padding-top:0px;padding-left:0px;padding-right:0px;border-top-width:0px; "alt=" image " Src= "Http://s3.51cto.com/wyfs02/M00/83/AF/wKiom1d6NuCSDm5ZAALz_2ZYC6w276.png" border= "0"/>

by viewing certificate Manager, you find that the issuer of the personal certificate is Wireless, rather than a CA built within the user's enterprise an enterprise certificate issued to, for example:

650) this.width=650; "width=" 626 "height=" 131 "title=" image "style=" border-right-width:0px;background-image:none; border-bottom-width:0px;padding-top:0px;padding-left:0px;padding-right:0px;border-top-width:0px; "alt=" image " Src= "Http://s3.51cto.com/wyfs02/M01/83/AF/wKiom1d6NuHBlkt2AAFVRWENQmo580.png" border= "0"/>

Judging by the above analysis is because JAVA -developed tools to connect This secondary DC Unable to find a valid certificate, resulting in an error

Workaround:

=========

in the personal certificate, re-apply 1 certificates, the process is as follows :

1. Navigate to: Personal - certificate, right-click : All Tasks-Request a new certificate

650) this.width=650; "Width=" 584 "height=" 282 "title=" image "style=" border-right-width:0px;background-image:none; border-bottom-width:0px;padding-top:0px;padding-left:0px;padding-right:0px;border-top-width:0px; "alt=" image " Src= "Http://s3.51cto.com/wyfs02/M02/83/AE/wKioL1d6NuSDtOVVAAJkE-KVhOA249.png" border= "0"/>

2. In the certificate registry, click directly: Next

650) this.width=650; "Width=" 571 "height=" 413 "title=" clip_image006 "style=" border-right-width:0px;background-image : none;border-bottom-width:0px;padding-top:0px;padding-left:0px;margin:0px;padding-right:0px;border-top-width:0 px; "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/M02/83/AF/wKiom1d6NuXhTYesAACAmG5jjQQ364.jpg "border=" 0 " />

3. In: Request certificate, TICK: domain controller, and click: Properties

650) this.width=650; "Width=" 572 "height=" 414 "title=" clip_image007 "style=" border-right-width:0px;background-image : none;border-bottom-width:0px;padding-top:0px;padding-left:0px;margin:0px;padding-right:0px;border-top-width:0 px; "alt=" clip_image007 "src=" http://s3.51cto.com/wyfs02/M02/83/AF/wKiom1d6NubCGz50AAC0rMmqtXY352.jpg "border=" 0 " />

4. In the properties of the domain controller, navigate to: Certification authority, tick our enterprise root CA, for example:

650) this.width=650; "Width=" 622 "height=" 318 "title=" image "style=" border-right-width:0px;background-image:none; border-bottom-width:0px;padding-top:0px;padding-left:0px;padding-right:0px;border-top-width:0px; "alt=" image " Src= "Http://s3.51cto.com/wyfs02/M01/83/AE/wKioL1d6NueC5J4JAAIKYe0OXH0313.png" border= "0"/>

5. Upon completion of the application, such as

650) this.width=650; "Width=" 640 "height=" 261 "title=" image "style=" border-right-width:0px;background-image:none; border-bottom-width:0px;padding-top:0px;padding-left:0px;padding-right:0px;border-top-width:0px; "alt=" image " Src= "Http://s3.51cto.com/wyfs02/M00/83/AF/wKiom1d6NunScMowAAJL9IDYRdM291.png" border= "0"/>

6. Modify The AD user password through the JAVA tool to successfully

This article is from "Jianbin Liu's Blog" blog, please be sure to keep this source http://liujb.blog.51cto.com/269257/1795703

Modify AD user password times error by modifying AD user's tools through Java development