https://community.cisco.com/t5/network-access-control/error-authentication-rejected-unspecified/m-p/3887961#M24757 <P>OK, found the problem!&nbsp; Kerberos realm name (Servers in the Selected Group) not only needs to be all uppercase but also FQDN!!&nbsp; So you cannot use MYDOMAIN, you must use MYDOMAIN.COM.&nbsp;</P> Wed, 10 Jul 2019 19:08:05 GMT frobozz 2019-07-10T19:08:05Z https://community.cisco.com/t5/network-access-control/error-authentication-rejected-unspecified/m-p/3887948#M24755 <P>Testing a new (first) AAA Server Group (kerberos to Active Directory) on my ASA 5506 using ASDM, I receive:</P><P><STRONG>ERROR: Authentication Rejected: Unspecified</STRONG></P><P>&nbsp;</P><P>If I supply an incorrect password, I receive:</P><P><STRONG>ERROR: Authentication Rejected: Invalid Password</STRONG></P><P>&nbsp;</P><P>This leads me to believe the ASA is working fine and it is some problem with active directory.&nbsp; I have tried several AD accounts, made sure remote access is granted.&nbsp; Would like to check the Domain Controllers event logs for a clue but have no idea where to start looking - Windows logging has gotten completely out of control....</P><P>&nbsp;</P><P>Any insight would be appreciated.</P> Wed, 10 Jul 2019 18:52:32 GMT https://community.cisco.com/t5/network-access-control/error-authentication-rejected-unspecified/m-p/3887948#M24755 frobozz 2019-07-10T18:52:32Z https://community.cisco.com/t5/network-access-control/error-authentication-rejected-unspecified/m-p/3887961#M24757 <P>OK, found the problem!&nbsp; Kerberos realm name (Servers in the Selected Group) not only needs to be all uppercase but also FQDN!!&nbsp; So you cannot use MYDOMAIN, you must use MYDOMAIN.COM.&nbsp;</P> Wed, 10 Jul 2019 19:08:05 GMT https://community.cisco.com/t5/network-access-control/error-authentication-rejected-unspecified/m-p/3887961#M24757 frobozz 2019-07-10T19:08:05Z