topic Re: User Login issue on Cisco ISE version 2.1.0.474 in Network Access Control

User Login issue on Cisco ISE version 2.1.0.474

faizan.khan — Tue, 18 Sep 2018 14:57:08 GMT

User logs in to wireless network with correct(verified) AD credentails ISE throws "invalid password"
Checking through ISE guest logs I notice following error logged.

2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] guestaccess.flowmanager.step.guest.CredentialStepExecutor -:ex-tieto-tvanderhaar:- User (ex-tieto-tvanderhaar) login failed
2018-09-18 08:34:41,331 ERROR [http-bio-172.16.113.45-8443-exec-4331][] cpm.guestaccess.auth.authentication.NAAuthResultProcessor -:ex-tieto-tvanderhaar:- Can not find the authStoreGUID in the authenticated authentication Result!!

AD diagnostics done on ISE no problems found!

Re: User Login issue on Cisco ISE version 2.1.0.474

Jason Kunst — Tue, 18 Sep 2018 15:04:44 GMT

What version of ISE? Are you using the guest (CWA) portal?

Do you have AD allowed in your guest identity store ?

Re: User Login issue on Cisco ISE version 2.1.0.474

faizan.khan — Wed, 19 Sep 2018 06:30:16 GMT

What version of ISE? --- Cisco ISE version 2.1.0.474

Are you using the guest (CWA) portal? --- Yes

Do you have AD allowed in your guest identity store ? --- Yes

Re: User Login issue on Cisco ISE version 2.1.0.474

Jason Kunst — Wed, 19 Sep 2018 20:30:36 GMT

This should work with the defaults as well. Can you log into the guest portal using an internal user or even a guest? Is your portal setup to use that store for the auth method (under guest portal settings). otherwise please engage the TAC to look at your system