Resetting passwords in AD LDS not honoring password history via Java ldap api

Question

I am trying to implement reset password functionality for accounts in Windows 2012 R2 AD
LDS via java ldap api. But it is not honoring password history constraint. When I tried to implement change password it is enforcing password history. I am using the following code to reset password.
@Override
public void updatePassword(String password) throws LdapException {
try {
String quotedPassword = "\"" + password + "\""; 
char unicodePwd[] = quotedPassword.toCharArray(); 
byte pwdArray[] = new byte[unicodePwd.length * 2]; 
for (int i=0; i pwdArray[i*2 + 1] = (byte) (unicodePwd[i] >>> 8); 
pwdArray[i*2 + 0] = (byte) (unicodePwd[i] & 0xff); 
ModificationItem[] mods = new ModificationItem[]{new ModificationItem(DirContext.REPLACE_ATTRIBUTE,new
BasicAttribute("UnicodePwd", pwdArray))};
LdapContext ldapContext = (LdapContext)ldapTemplate.getContextSource().getReadWriteContext();
final byte[] controlData = {48,(byte)132,0,0,0,3,2,1,1};
BasicControl[] controls = new BasicControl[1];
final String LDAP_SERVER_POLICY_HINTS_OID = "1.2.840.113556.1.4.2239";
controls[0] = new BasicControl(LDAP_SERVER_POLICY_HINTS_OID, true, controlData);
ldapContext.setRequestControls(controls);
ldapContext.modifyAttributes(getRelativeDistinguishedName(), mods);
} catch (Exception e) {
throw new LdapException("Failed to update password for:" + this.getDistinguishedName(),
e);
Please let me know if I am doing anything wrong.

Answer 1

Hi,
I suggest you check password policy on the AD LDS server.
If the server is under workgroup mode, then local password policy is applied; if it is domain-joined, domain password policy over-rides local password policy, you may also need to check if there is any PSO configured.
More information for you:
AD DS: Fine-Grained Password Policies
https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx
Step 4: View a Resultant PSO for a User or a Global Security Group
https://technet.microsoft.com/en-us/library/cc770848(v=ws.10).aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]