It really synched with Active Directory, updating the user email. In Smartdashboard, I opened the Users and Administrators and queried a certain user, edited it to put in it an email, and clicked ok. Although, I just remembered to do this one test:

Can you help clarifying this, DC is not read only, and I have configured the encryption on the account units connection. But I read the topic 'Enabling User Directory' of the 'R77 Security Management Administration Guide', and now I am confused as if I need this or not for the purpose of my goal. All my users are stored in AD, so i never checked the option 'Use User Directory for Security Gateways' thinking it would create a user directory that I wouldn't need. Is this what you Thank you, your post was most helpfull! I just wanted to clarify something. I have been dealing with some other important issues and couldn't try this earlier, but i just went through the whole process of configuration, trying to see if something slipped and everything seems ok, but still can't change a user password via browser Johnson, CD, MVP: I have checked, in Global Porperties > User Directory, the option 'Enable password change when a user's Active Directory password expires'. I am prompted to type a password but after I retype it and click OK button i get the 'Failed to modify password, LDAP Error.' error.

I tried the process of resetting the password over Checkpoint Mobile Client and browser, but the result is the same either way. Given these settings, as the user that is connecting Check Point to my LDAP Server is a domain admin user, shouldn't it be possible to reset an expired user password?Ĭan you please point out what I am missing? Users always have accessed vpn without problems, except when password expires. On checkpoint side, in 'Servers and OPSEC Applications.' option, I have checked both read and write data to the LDAP Server Properties of LDAP Account unit and checked 'Use Encryption (SSL)' with encryption port 636, and feth fingerprint from the ldap server went smoothly. We are using Check Point services, my LDAP Server is a Windows Server 2008 R2, and the user connecting Checkpoint to our LDAP Server has domain administrator privileges. I want the users in my network to have the ability to reset their expired password over vpn connection.Ĭurrently, when accessing the vpn, if the user password is expired, the user is prompted to provide the value to the new password, but everytime the message returned is 'Failed to modify password, LDAP Error.' so they can only reset their password on-premises.

Checkpoint vpn client