- Community Home
- >
- Networking
- >
- Wireless
- >
- M and MSM Series
- >
- MSM760 and Active Directory account lockouts
-
- Forums
-
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
- HPE Blog, Austria, Germany & Switzerland
- Blog HPE, France
- HPE Blog, Italy
- HPE Blog, Japan
- HPE Blog, Middle East
- HPE Blog, Latin America
- HPE Blog, Russia
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
-
Blogs
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Blog, Latin America
- HPE Blog, Middle East
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
-
Information
- Community
- Welcome
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Tips and Tricks
- Resources
- Announcements
- Email us
- Feedback
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Aruba Airheads Community
- Enterprise.nxt
- HPE Dev Community
- Cloud28+ Community
- Marketplace
-
Forums
-
Blogs
-
Information
-
English
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
01-28-2011 05:12 AM
01-28-2011 05:12 AM
MSM760 and Active Directory account lockouts
Hi,
We have two 760's servicing 10 offices with 26 AP's (a combination of 422's and 320's). We have come across a situation where a user connects to wireless, but within minutes their AD account will be locked. The lock comes from the Radius server following an aithentication attampt by the 760. If we turn off wireless on their machines then they can work fine.
Trying to dig into this I have found the following
In most case the user has at some point had two devices connecting to the AP's at the same time (ie migrating to a new machine or a Blackberry or iPhone), however in many cases they only have one device connecting now.
The issue has affected both Dell and Lenovo hardware, multiple models.
In most cases, but I don't think all, the OS has been 64bit Windows, usually Windows 7 but sometimes XP
The AD enviroment is 2008R2
An example of the issue includes user A logging in to machine A, no issues
User A logs in to machine B, within minutes the AD account is locked
User B logs in to machine A no problem
Now the weird part is that User A can now log into machine C and have no problems.
I'm absolutely stumped by this one so any help appreciated.
Dave
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
02-01-2011 08:04 AM
02-01-2011 08:04 AM
Re: MSM760 and Active Directory account lockouts
I've managed to narrow this issue down since my original post, and hopefully someone can help me.
The lockouts are caused where a user has entered their username differently from the pre-windows 200o account name format in Active Directory. For example username is BSmith when they log in to their machine, but the AD username is bsmith. The Kerberos user principle name is case sensitive and this discrepency is causing the authentication to fail.
Are there any ways that I can modify authentication to avoid this? The AD account name is not consistent across the domain so I cannot change all users or suddenly tell them to change their login name.
Any help gratefully received!
Dave
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-20-2011 02:46 PM
07-20-2011 02:46 PM
Re: MSM760 and Active Directory account lockouts
Afternoon,
Did you ever get a solution to this? I am having the same issue I don't understand why user id would be case sensitive
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2021 Hewlett Packard Enterprise Development LP