Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1134
Views
0
Helpful
2
Replies

Cisco ACS 4.2.0.124 to External AD authentication problems

mario-leitao
Level 4
Level 4

‎05-03-2010 07:27 AM - edited ‎03-10-2019 05:06 PM

After I upgraded the ACS to 4.2.0.124 it began showing the error below from time to time on the agent. It stops authenticating some users and after 50 minutes it the stops authentincating all of them. I tried to Restart all services on ACS but it did not work and it just works when I reload the ACS appliance. 

NTLIB: Unable to get info from RootDSE - check Active Directory availability [-2147016689, 1197]

NTLIB: Unable to get info from RootDSE - check Active Directory availability [-2147016646, 1197]

NTLIB: ad_FindUser failed because Active Directory is not available [1744]

NTLIB: ad_FindUser failed because Active Directory is not available [1744]

RPC: NT_DSAuthoriseUser reply sent

RPC: NT_DSAuthoriseUser reply sent

NTLIB: Unable to get info from RootDSE - check Active Directory availability [-2147016646, 1197]

NTLIB: ad_FindUser failed because Active Directory is not available [1744]

NTLIB: Unable to get info from RootDSE - check Active Directory availability [-2147016646, 1197]

RPC: NT_DSAuthoriseUser reply sent

NTLIB: ad_FindUser failed because Active Directory is not available [1744]

RPC: NT_DSAuthoriseUser reply sent

RPC: NT_DSAuthoriseUser received

NTLIB: Loading Domain Cache

RPC: NT_DSAuthoriseUser received

NTLIB: Loading Domain Cache

NTLIB: Unable to get info from RootDSE - check Active Directory availability [-2147016646, 1197]

NTLIB: Unable to get info from RootDSE - check Active Directory availability [-2147016646, 1197]

NTLIB: ad_FindUser failed because Active Directory is not available [1744]

RPC: NT_DSAuthoriseUser reply sent

Labels:
0 Helpful
2 Replies 2

Javier Henderson
Level 4
Level 4

‎05-03-2010 07:30 AM

You said you rebooted the ACS appliance, so I assume you are running the ACS SE. Does the version of the Remote Agent match the version of ACS?

0 Helpful

mario-leitao
Level 4
Level 4
In response to Javier Henderson

‎05-03-2010 09:14 AM

Yes, the remote agent is also running version 4.2.0.124.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents