topic Re: ISE node becomes unjoined from AD in Network Access Control

ISE node becomes unjoined from AD

dodgerfan78 — Tue, 18 Dec 2018 13:53:20 GMT

A couple times over the last week, one of my ISE nodes has become unjoined from AD. Does anyone know what could cause this? Running 2.4.0357.

Thanks.

Re: ISE node becomes unjoined from AD

Timothy Abbott — Tue, 18 Dec 2018 15:34:02 GMT

Hi,

Please work with the TAC to troubleshoot why this is occuring.

Regards,

-Tim

Re: ISE node becomes unjoined from AD

Nadav — Tue, 18 Dec 2018 18:30:44 GMT

I've seen servers which are down appear under External ID sources as Not Jointed, until they were brought back up.

Any chance the servers which were "disjoined" were down or inaccessible during that time?

Re: ISE node becomes unjoined from AD

dodgerfan78 — Tue, 18 Dec 2018 19:14:52 GMT

This is possible, except it happened last night when the PSN was not rebooted or brought down. I can double check though to see if something did happen to it.

Re: ISE node becomes unjoined from AD

Damien Miller — Tue, 18 Dec 2018 19:16:30 GMT

I would also check with the AD team to see if the machine account was deleted, moved, or disabled. I have had this happen in the past.

Re: ISE node becomes unjoined from AD

Nadav — Sat, 22 Dec 2018 13:50:53 GMT

Any news?

Re: ISE node becomes unjoined from AD

dodgerfan78 — Sat, 22 Dec 2018 13:54:56 GMT

It does seem to happen when I have started services on the ise node. I haven't noticed it outside of that again.

Re: ISE node becomes unjoined from AD

Nadav — Sat, 22 Dec 2018 14:08:49 GMT

Yeah, sometimes the alarms don't quite match up with WHY it's happening.

NMS systems usually have something called root-cause-analysis to only bring up an alarm for the exact reason something happened and not other things which derived from that event. Hopefully ISE will do so in the future.