topic Re: ise integrate with AD in Network Access Control

ise integrate with AD

abdelmoulamarhabi1 — Sat, 28 Mar 2020 13:15:38 GMT

HI ,

i m trying to integrate cisco ise with AD but it isnt work.bellow the message erreur that i fond in the ISE :

Error Description: Invalid Username Or Password

Support Details...
Error Name: Invalid Username Or Password
Error Code: Invalid Username Or Password

Detailed Log:

Error Description :
Cannot Retrieve TGT For Account Cisco@ABDO.COM , Invalid Username Or Password

Error Resolution :
Please Check Machine Account : Cisco@ABDO.COM Password In Dc Abdo123.abdo.com , This Error Might Occur Due To Replication Errors

Join Steps :
13:03:31 Joining To Domain ABDO.COM Using User Cisco
13:03:31 Searching For DC In Domain ABDO.COM
13:03:31 Found DC: Abdo123.abdo.com , Client Site Is Default-First-Site-Name , Dc Site Is Default-First-Site-Name
13:03:31 Checking Credentials For User Cisco
13:03:31 Getting TGT For Account Cisco@ABDO.COM
13:03:31 Cannot Retrieve TGT For Account Cisco@ABDO.COM , Invalid Username Or Password

The problems that i proprly configure the username and password.

Thank you.

Re: ise integrate with AD

parviz — Sat, 28 Mar 2020 13:33:35 GMT

Hi,

User cisco must have administrative privileges in AD to join and then check the username and password.

Re: ise integrate with AD

balaji.bandi — Sat, 28 Mar 2020 17:53:07 GMT

you can have other admin for ISE to fetch the information - how you can achieve with that gola, below URL explained well detailed for reference :

https://networkproguide.com/cisco-ise-24-active-directory-admin-login-configuration/

Re: ise integrate with AD

hslai — Mon, 30 Mar 2020 18:19:01 GMT

I would suggest to verify the user credentials using the "Test User" tool.

Unless the AD infrastructure is locked down or the computer account is pre-created in AD, it does not require a domain admin to join. See Who can add workstation to the domain