ACS Windows Server with wrong user authenticatoin

[t.waibel]

Hello,

we have a new Windows ACS Server with external user database authentication. Users at the ACS Server were configured, disabled, enabled and deleted by RDBMS synchronization with account actions.

We have the problem that a user could be authenticated through the external LDAP even though if the user or his group is disabled inside the Windows ACS Server.

The same procedure doesn't work with our ACS appliance where user administration is done only through the webinterface .

Does anybody know a solution for this problem?

Best regards

Torsten Waibel

[darpotter]

Could it be you have unknown user authentication enabled?

If you did, and a username came through authentication in a different format to one one added via dbsync... eg user@domain or domain\user the unknown user policy might legitimately think its a different user. In which case it would depend on what group mapping had been setup.

Just a thought.

[t.waibel]

Hello darpotter,

finally we have fixed the problem. it was a lyer 8 one ;-)

Best regards

Torsten