ACS v4 User Authentication Issues

[jonhill]

We've had ACS in and working for our Wireless network for the past 8 weeks, then on friday we started having problems with user authentication. As far as we can check nothing has changed on the ACS or WLC we think it's a change within AD thats caused the problem but we need to prove it with our Server support manager.

The two authentication failure messages we are getting are Authetication session invalidated and EAP-TLS or PEAP authentication failed during SSL handshake.

If anyone could shed some light of what these errors might represent it would be much appreciated?

Thanks

Jon

[a.kiprawih]

Where do you see the message? On AP?

I have seen the same error "AP-TLS or PEAP authentication failed during SSL handshake" during implementation, and it was due to corrupted my cert, not the AD.

I re-generate new cert (and of course, you must follow correct procedures/steps) to get it run again.

Pls look at this doc for some guide:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00801df0ea.shtml

HTH

AK

[mmmoookkk]

Hello

if the corruption is not in your local certificates, which i think to be unlikly since it can't be that all pc/laptops have this problem then you might want to check if some one changed the root CA of you domain. if so then all you need to do is reissue a service sertificate to your ACS from the CA.

best use the "subordinate certificate authority" template or the "web server" if you have to. then issue anew certificate to your laptop and delete the old one using the certificate management console in mmc.exe snapin.

hope this helps.

regards

Motti