Active Directory issue after password change

[davelebbing]

XCreds v3.2

XCreds sign-in does not work after an Active Directory user password is changed.

When signing in using XCreds as an Active Directory user, if the AD user password is changed and then the user tries to sign again, XCreds sign-in will fail if the new password is entered. XCreds sign-in will succeed if the old password is entered.

[bamtan]

Does the Active Directory user in question have a Secure Token? Check with sysadminctl -secureTokenStatus ad_user.

I believe you have to implement a Secure Token user which can stomp out other users passwords. There's more information on the 3.1 release page: https://twocanoes.com/knowledge-base/whats-new-in-xcreds-3-1/