Active Directory changes password, only old password works

[fogier]

We have a Nagios XI 2011 v3.3 vmware image (32bit) and use Active Directory Integration (NOT LDAP).

A user changed his password yesterday and cannot login with his new password. His old password still works.
I where under the impression that Nagios sends the authentication request to the domain controllers and gets a fail or Ok for the login.
How does this work? Does it synchronize or hold the password somewhere local?

We only use Windows 2008 R2 Domain Controllers with forest/domain functional level of Windows 2008 R2.

[mguthrie]

Check to verify that the AD authentication is enabled. XI passes the credentials from the login page to AD to verify. If it can bind with the AD server, the user is logged in. Do you have a way to verify the new credentials in AD with another application?

[fogier]

I tried this with a testaccount and my own account and it works like a charm.. I can always login to Nagios with my old password and my new password. Looks like some sort of caching for offline authentication??

Asked my colleague and he can login now with his new password. It took a long time (maybe a week) before Nagios accepted his new password.

Strange, for now this case can be closed.