topic Re: External DB account restriction Error in Network Access Control

External DB account restriction Error

coxendine — Sun, 10 Mar 2019 14:14:21 GMT

Can anyone tell me what the following ACS error means: "External DB account restriction". We're using ACS 3.0(3) for Windows NT/2000. I'm trying to access certain equipment within our network via https & telnet using AAA and I keep getting this error. I have been unable to find this specific error code on the Cisco Support Site. Thanks in advance for your help.

Re: External DB account restriction Error

r.vanwolferen — Mon, 07 Apr 2003 14:02:55 GMT

Hello,

can you give me the configuration of the device your telnetting to?

Is the error shown in ACS or as bebug message on the device?

Greetings,

Rene

Re: External DB account restriction Error

dave.king — Thu, 10 Apr 2003 10:02:10 GMT

I'm getting the same error - it's coming up in ACS.

Re: External DB account restriction Error

gfullage — Sun, 13 Apr 2003 23:18:57 GMT

This usually means the NT account has some restrictions on it. Do you have "Grant Dialin permission to user" checked either under the NT user account and/or under the External User Database - NT/2000 - Configure section, they need to match.

check also that you don't have specific permissions set on the NT account like where they can login from, times they can login, etc, this is usually the culprit.

Re: External DB account restriction Error

coxendine — Mon, 14 Apr 2003 11:54:09 GMT

Thanks for all your help. This seems to have solved the issue.

Re: External DB account restriction Error

fpicciani — Mon, 22 Dec 2003 14:52:12 GMT

We have a network with various ACS (appliance version 3.2) with a local DB and a central Agent(Cisco Secure ACS remote Agent) that collect the accounting logs.

We do not use an external DB but we have this Authentication failure code:

Authen-Failure-Code: External DB account Restriction

Thanks

Saverio