VMware Workspace ONE Community
KrzysztofAmbrzy
Contributor
Contributor
‎09-24-2018 06:12 AM

Boxer for Android not let users to login and lock them in AD after password change.

Hi All, i have quite annoying problem with VMware Boxer for Android. Looks like Boxer do not let users in after password Change in AD. That is how it works:


1. User make new password on his PC.


2. After some time Boxer asks about password (Fingerprint is working but after try, user is asked to provide password)


3. User is using new Password - Boxer says: Password is invalid


4. User is using old Password - Boxer says: Password is invalid After few tries (no matter which password), user is locked out in AD.


Looks like Boxer is trying to authenticate always with 'old' password which is stored somewhere.


Before, was a bit different... when user change password in AD, then after few hours Boxer after Fingerprint authentication showed a pop-up that he can not authenticate against Exchange Server, and when you click that pop-up you was reditrected to ActiveSync Options in Boxer where you can change your Exchange Password... Now you can not even open Boxer to get ActiveSync Settings.


To make it works again, users have to delete App and install it again, or what is quite the same: clear all local data from Boxer using App Manager from Android, then start config from very begining.


Any ideas?

Labels (1)
Labels
Reply
0 Kudos
3 Replies
JanKulir
Contributor
Contributor
‎10-01-2018 01:36 AM

One thing that *might* be similar:
One customer reported to us recently (29. Sept), that Boxer enabled androids exhausted limit of ActiveSync devices in their exchange.
One device was showing multiple times in Exchange management, so after limit of 10 was exhausted, that user could no longer connect to mail.
I'm not sure why that started happening all of the sudden.

What is the version of Boxer you are using? Could be some issue with newest version from Playstore.
Reply
0 Kudos
KrzysztofAmbrzy
Contributor
Contributor
‎10-08-2018 10:57 AM

It seems to happen on different Android phones (on iOS is working fine). Not sure if can be connectet somehow with number of devices.
Last time when i had this issue (have it everyday but no time to investigate it correctly)... so last time when i had a little time to look at, i just unlocked the user in AD, set Password to old one and then Boxer started sync without any problems!
So... conclusion is simple: Password which is inserted once and works is save somewhere in Boxer. When user change pass in AD and Boxer asks for Password (as always) he is using 'old' saved previously Password to authenticate against SEG... or ActiveSync (not sure how it works exactly), even if user inserted new one.

Reply
0 Kudos
ReinaRoja
Contributor
Contributor
‎02-28-2019 12:45 AM

Hello,

We have similar problem, our ADFS masters have turned on the ADFS smartlockout feature with x# of tries before lockout.
It looks that the device is doing multiple ActiveSync requests with the old cached password and then when the app realise that the password has changed and ask user for it, the ADFS smartlockout already locked the device authentication and restricted the possibility for the device to log in for some preset of time. So the new user password is not accepted.

Question is how many attempts are there?
Any idea?
Reply
0 Kudos