Why, when I call AzMan, I get the error message "Failed to update the password"?

Question

I do an authorization check from a WinForms application using the AzMan authorization provider from the Enterprise Library and get the following error:

Failed to update password. The value specified as the current password is incorrect. (Exception from HRESULT: 0x8007052B) (Microsoft.Practices.EnterpriseLibrary.Security.AzMan)

---

Failed to update password. The value specified as the current password is incorrect. (Exception from HRESULT: 0x8007052B) (Microsoft.Interop.Security.AzRoles)

The AzMan store is hosted in ADAM on another computer in the same domain. Other computers and users do not have this problem. The user making the call has read access to both ADAM and the AzMan store. The computer running the WinForms application and the computer with ADAM are located on Windows XP Service Pack 2 (SP2).

I had access issues with AzMan before I decided, but this is new ... What am I missing?

Answer 1

I learned from the event log that there was a security issue when a user called AzMan from a remote computer. The user did not belong to the local user group on the computer running ADAM / AzMan. When I fixed that everything works again.

Answer 2

For AzMan with ASP.NET, enable impersonation in web.config ( <identity impersonate="true" username="xx" pasword="xx" /> ) and make sure with the AD administrator that the impersonation account has "reader" permissions in the AzMan store; plus, grant write permissions for this account in the Temporary ASP.NET Files folder (under C:\Windows\Microsoft.NET\<framework> ).