LDAP Authentication - Invalid Login of one for the user who changed her LDAP Password using Forget Password Screen

LDAP Authentication - Invalid Login of one for the user who changed her LDAP Password using Forget Password Screen

by Praveen Kumar Shanmugam -
Number of replies: 3

Hi All,

One of  our user [LDAP] used the forget password link in Moodle to change his password to login to the training (Moodle) portal. After that she couldn't able to login to the Training Portal. When we see the logs it should the below error message 

ERROR MESSAGE : Login failed for the username for the reason with id '3'.

Moodle Version : 3.0

We try to look in the Database "[dbo].[mdl_user]" table, we noticed the password column has value for that user, For the reset of the LDAP user the value of the password is "not cached", so we update the same for this user, still it is not working it is showing the same error.  

We need help t fix this LDAP User Password issue. We cannot delete this user, since the user had already completed few courses in the training  portal.


Thank You in Advance

Praveen Kumar Shanmugam

Average of ratings: -
In reply to Praveen Kumar Shanmugam

Re: LDAP Authentication - Invalid Login of one for the user who changed her LDAP Password using Forget Password Screen

by Emma Richardson -
Picture of Documentation writers Picture of Particularly helpful Moodlers Picture of Plugin developers

Are you ldap settings so that the password is updated both ways?  From ldap to moodle and moodle to ldap?  have you tried resetting her password on the ldap server?  Does her password meet the minimum requirements on the ldap server?  Could it have expired on the ldap server?  Could it be that a required field is missing?

In reply to Emma Richardson

Re: LDAP Authentication - Invalid Login of one for the user who changed her LDAP Password using Forget Password Screen

by Praveen Kumar Shanmugam -

Hi Emma,

Thank you for your prompt response.

Are you ldap settings so that the password is updated both ways? 

Bind settings

Don't cache passwordsYesSelect yes to prevent passwords from being stored in Moodle's DB.

Force change password

Force change passwordNo

Force users to change password on their first login to Moodle.

Use standard page for changing passwordYes

If the external authentication system allows password changes through Moodle, switch this to Yes. This setting overrides 'Change Password URL'.

NOTE: It is recommended that you use LDAP over an SSL encrypted tunnel (ldaps://) if the LDAP server is remote.

Password formatPlain textSpecify the format of new or changed passwords in LDAP server.
Password-change URLURL of lost password recovery page, which will be sent to users in an email. Note that this setting will have no effect if a forgotten password URL is set in the authentication common settings.


LDAP password expiration settings.

ExpirationnoSelect No to disable expired password checking or LDAP to read passwordexpiration time directly from LDAP
Expiration warning10Number of days before password expiration warning is issued.
Expiration attributeOptional: Overrides the LDAP attribute that stores password expiration time.
Grace loginsNoEnable LDAP gracelogin support. After password has expired user can login until gracelogin count is 0. Enabling this setting displays grace login message if password is expired.
Grace login attributeOptional: Overrides gracelogin attribute


From ldap to moodle and moodle to ldap?

--- There is no Sync Job is running on the Moodle platform.

LDAP users sync job\auth_ldap\task\sync_taskLDAP serverEdit task schedule: LDAP users sync jobNeverTask disabled00***0No


have you tried resetting her password on the ldap server

--Yes we did it from our Active Directory Server  and ask the use to try it again. Still we are facing the same issue.


Does her password meet the minimum requirements on the ldap server?

-- New password is created based on the Password Policy


 Could it have expired on the ldap server?

- The password is not Expired when we reset the user's password


Could it be that a required field is missing?

- All the mandatory fields are entered in the Active Directory.

- The Fields mapped on the Moodle also capture based on the Last Successful login

- the user last successful login was 4 Months before.


Thank You for your support.

In reply to Praveen Kumar Shanmugam

Re: LDAP Authentication - Invalid Login of one for the user who changed her LDAP Password using Forget Password Screen

by Emma Richardson -
Picture of Documentation writers Picture of Particularly helpful Moodlers Picture of Plugin developers

Is LDAP Force password change box checked?  Are you using ldaps?  If you change a user password via Moodle manually does it work?

Average of ratings: Useful (1)