pwm-general

Using MS-SQL 2019 I'm receiving the following error which is clearly a certificate error. The DB

Not in the current release, but we're working on it - slowly - in the next version. On Friday,

All domain controllers will require LDAPS (SSL) enabled with correct certificates. This will likely

Depending on what specific version of v1.8 your running its going on 10+ years old without patches.

This is an error from AD. You can use PWM logs and LDAP wire trace settings to find out what LDAP

The SAN field of your subject (subject alternate name) needs to match the DNS name address for _all_

The URL should be /pwm/public/newuser/profile/[profile-name] On Wednesday, March 20, 2024 at 3:33:48

Robert, I figured this out before you responded but you mentioned something that is 100% correct. The

Should it work with the https.server <key> also? On Wednesday, November 6, 2019 at 8:53:41 PM

Hi. As I can see in the PwmConfiguration.xml there are fullchain + key in the "https.server.cert

1st of all. Thank you for all your help. Yes. I tried it with zero. To be clear: It accepts the

Did you check all of the LDAP servers in the domain. On Tuesday, February 20, 2024 at 1:16:08 AM UTC-

Hello, In the HelpDesk interface, there's the "Last connection time" information, but I

Thank you for your response I have some use case for some helpdesk operators which have to modify an

Unfortunately, while cleaning up spam posts to this group, a few months worth's of the most

This means your user doesn't have a forgotten password profile that applies to it. You need to

Not directly, you'd need to use java keytool or other utility to convert it to a java keystore.

This setting controls this behavior: LDAP ⇨ LDAP Settings ⇨ Microsoft Active Directory ⇨ Use Proxy

See the instructions inside the PwmConfiguration.xml file. Particularly about setting "

Are you using an older version of PWM? This setting was added some time ago: https://www.pwm-project.

AD does not support password modifications over non-secure LDAP. On Friday, January 19, 2024 at 2:19:

https://github.com/pwm-project/pwm?tab=readme-ov-file#docker On Thursday, January 18, 2024 at 5:56:11

Correct, embedded HTML is not displayed in error messages for security reasons. You could use custom

To import the cert into PWM, you need only go to the PWM setting 'LDAP ⇨ LDAP Directories ⇨ [

Sorry your having trouble with tomcat, It's been ages since I've worked with a tomcat install

Yes. You can have PWM search each LDAP profile sequentially (ideal if you don't have duplicate

PWM will run on tomcat 10 if you follow the instructions for migrating pre-jakarta namespace apps (

1. This is not a SQL injection attack as the user store is LDAP, not a SQL database. 2. I personally

It looks like the contents of the LocalDB, used for local logs, statistics, audit records and test

The config editor imports certs for each LDAP profile configured. By default it will import the root-