Problem: "the credentials supplied conflict with an existing set of credentials"

[Mike Grishaber]

Hello All,

I have a server-side appication that validates users logging in against an
AD.
The application uses the following API to pass in the user's credentials.

HRESULT ADsOpenObject(
LPWSTR lpszPathName, //The ADsPath name of the object
LPWSTR lpszUserName, //User name to use for credentials
LPWSTR lpszPassword, //Password to use for credentials
DWORD dwReserved, //Provider-specific flags
REFIID riid, //IID of primary interface
VOID FAR * FAR *ppObject //Interface on that object
);

This works fine for a few days, and then I start getting the following error
for all users that attempt to login.

"the credentials supplied conflict with an existing set of credentials"

Apparently, starting and stopping IIS on the server that hosts the
application solves the problem for a while, but I can't figure out why.
The application is accessed by the clients through an ISAPI extension
though, so maybe it is related.

Any help is greatly appreciated.

Thanks
Mike

 

[Cary Shultz]

This might be better posted to a scripting news group, like ADSI.

Is it possible that things are not being closed properly?

--
Cary W. Shultz
Roanoke, VA 24012

http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)

 

[Gary]

I've had this one before when trying to map network drives via adsi.
The thing is that you need to enumerate the logging in Users name and
password and apply them at the time of authentication. I'm guessing
that you are using the same login credentials each time that you run
the app. I have some code at http://www.menkaura.com/Forum/index.php
which will sort out the authentication challenge that you describe.

If its not obvious where the code is when you get there leave me a post
and I'll be happy to email it to you a solution.