topic Re: Active Directory- Create User Password in Workato Pros Discussion Board

Active Directory- Create User Password

bcastro — Thu, 12 May 2022 04:17:09 GMT

Hello automation Pros!

I am working on a recipe that creates users in Active Directory using Windows Server.

I am trying to map Password but I can't find the field to map it.

According to AD Docs the field should be: userPassword

Searching by Passw... in the list of fields to map I found the ones in the image attached.

Anyone one that can help?

Re: Active Directory- Create User Password

chijie — Thu, 12 May 2022 04:25:16 GMT

Hi Berenice,

Setting a user's password is actually a separate action..so you can have an action to create the user first, then a subsequent one to set the password.

Hope this helps!

Re: Active Directory- Create User Password

jeremyo — Thu, 12 May 2022 04:42:24 GMT

Just extending CJ's answer...

I think you also need to connect to AD using LDAPS (port 636).

Re: Active Directory- Create User Password

bcastro — Thu, 12 May 2022 06:38:08 GMT

I was able to find Operation Set User Password in Active Directory. Thanks.

Re: Active Directory- Create User Password

bcastro — Wed, 01 Jun 2022 01:07:10 GMT

Hello Again automation Pros! Continuing with this thread. While using Set Password to User operation I am getting error:

[LDAP: error code 53 - 0000001F: SvcErr: DSID-031A125F, problem 5003 (WILL_NOT_PERFORM), data 0

]; nested exception is javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000001F: SvcErr: DSID-031A125F, problem 5003 (WILL_NOT_PERFORM), data 0

I am passing the password as a siple string without encoding it.

Anyone has experienced the same issue? Is it related to the Password Policy set in LDAP? Thanks

Re: Active Directory- Create User Password

bcastro — Mon, 06 Jun 2022 23:12:19 GMT

Updating my own thread. Set password ONLY works with an SSL Connection.

Re: Active Directory- Create User Password

jeremyo — Mon, 06 Jun 2022 23:59:46 GMT

That was the destination I arrived at as well. It makes sense that security operations require a secure connection.

Re: Active Directory- Create User Password

FS-SAdmin — Tue, 15 Oct 2024 01:12:30 GMT

Hi @bcastro. Do you by chance have instructions for setting up Active Directory/LDAP SSL? What little information I can find does not provide enough detail.

Thanks in advance.

Re: Active Directory- Create User Password

ndy — Tue, 15 Oct 2024 07:46:58 GMT

Dear, @bcastro .

The error message you're encountering (LDAP: error code 53 - 0000001F: SvcErr: DSID-031A125F, problem 5003 (WILL_NOT_PERFORM)) typically occurs when Active Directory refuses to perform a password change operation. This is often due to how the password is being passed or because of a policy constraint in LDAP/Active Directory.
Common Causes:

Password Encoding: Active Directory (AD) requires the password to be in a specific format (UTF-16LE encoding) and enclosed in double quotes. This is a common reason for failure if you are passing a simple string.
LDAP Policies: Your Active Directory might have password policies in place (like password complexity, expiration, or length) that could be causing the issue.
Permissions: The account you're using to perform the operation might not have the necessary permissions to change or set passwords.
Secure LDAP (LDAPS): Password operations in AD typically require a secure LDAP connection (LDAPS). If LDAPS is not being used, AD may refuse the operation with the WILL_NOT_PERFORM error.