# Active Directory Authentication failed after User changed password

**URL:** <https://discuss.elastic.co/t/active-directory-authentication-failed-after-user-changed-password/222785>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [March 9, 2020, 7:00pm UTC](https://discuss.elastic.co/t/active-directory-authentication-failed-after-user-changed-password/222785 "2020-03-09T19:00:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![TonyLuc](https://avatars.discourse-cdn.com/v4/letter/t/5fc32e/32.png) [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\
**Post date:** [March 9, 2020, 7:00pm UTC](https://discuss.elastic.co/t/active-directory-authentication-failed-after-user-changed-password/222785/1 "2020-03-09T19:00:08Z")

</div>

In our environment, we are using the active directory realm to authenticate users.

This have been reported by several users that previously they could but after they changed their password they could not log in via Kibana with the new password.

The settings in the Elasticsearch.yml are pretty standard

xpack.security.authc.realms.active\_directory.mordor.bind\_dn: [gollum@mordor.com](mailto:gollum@mordor.com)

xpack.security.authc.realms.active\_directory.mordor.domain\_name: [blackland.mordor.com](http://blackland.mordor.com)  
xpack.security.authc.realms.active\_directory.mordor.order: 0  
xpack.security.authc.realms.active\_directory.mordor.ssl.verification\_mode: full  
xpack.security.authc.realms.active\_directory.mordor.ssl.certificate\_authorities: sauron.pem  
xpack.security.authc.realms.active\_directory.insperity.url: ldaps://Barad-dûr.blackland.mordor.com:636

Version: 7.6.0 for both ElasticSearch and Kibana  
Platform: Windows Server 2019 (Don’t ask me why)  
Windows implementation (Not using docker)

These are observed

1. New Users can login successful.
2. User changed password, authentication failed, sometimes it will recover after unspecified period. I don’t know. I use the default for **cache.ttl** that of 20 minutes, however it did not clear after the lapsed time.
3. I don’t see anything interesting in both the kibana and elasticsearch logs.

Questions:

Is this somethings that people experiences?  
Are there something I missed in the settings?  
What can I do to help the users?

Thanks for any helps and advises!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 6, 2020, 7:00pm UTC](https://discuss.elastic.co/t/active-directory-authentication-failed-after-user-changed-password/222785/2 "2020-04-06T19:00:09Z")

</div>

Closed on April 6, 2020, 7:00pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.