Incorrect password

authentication theory
1

Hello

I am integrating privacyidea with Windows AD, and the following error appears:

However, when I try to log in with the username and password without going through privacy, it works.

[2025-06-12 16:58:32,093][1099][140340559760320][INFO][privacyidea.lib.user:271] user ‘cassio’ found in resolver ‘surfix.dc’
[2025-06-12 16:58:32,094][1099][140340559760320][INFO][privacyidea.lib.user:273] userid resolved to ‘16a66be1-614e-45eb-90b7-4a187bfff849’
[2025-06-12 16:58:39,944][1100][140340559760320][INFO][privacyidea.lib.user:271] user ‘cassio’ found in resolver ‘surfix.dc’
[2025-06-12 16:58:39,945][1100][140340559760320][INFO][privacyidea.lib.user:273] userid resolved to ‘16a66be1-614e-45eb-90b7-4a187bfff849’
[2025-06-12 16:58:40,040][1100][140340559760320][INFO][privacyidea.lib.user:447] User cassio from realm surfix.dc tries to authenticate
[2025-06-12 16:58:40,052][1100][140340559760320][INFO][privacyidea.lib.resolvers.LDAPIdResolver:399] Failed to check password for ‘16a66be1-614e-45eb-90b7-4a187bfff849’/‘CN=cassio,OU=NOC,OU=SURFIX,DC=surfix,DC=dc’: ERR907: Bind failed with: invalidCredentials (49)
[2025-06-12 16:58:40,052][1100][140340559760320][INFO][privacyidea.lib.user:466] User cassio.surfix.dc@surfix.dc failed to authenticate.

2

The message few sense!

Please elaborate a bit more.
You are not mentioneing in the body, that you fail to login. WHERE are you trying to login?

WHAT are you actually doing.

WHAT do you have configured?

Thanks a lot for helping solving your problem.

3

Thanks for your attention, @cornelinux

I follow this tutorial:Here

in setup privacyIdea Provider credentials,
https://x.x.x.x
i not change “path/to/pi”
checked

ignore ssl

i checked display otp field and checked send domanis password to privacy idea.

but i not undesrtand, where is error.

What more could send here ?

4

Hello, i have sucess.
HOwever,at first i enter the domain/username, and i type password
the it says wrong otp password.
the i type password+otp, and sucess.

how do i change it to just the OTP?

5

Hello , sucess!

I change policies in OTPPIN=none

Thanks !!!

1 Like