topic Re: User Authentication in Network Access Control https://community.cisco.com/t5/network-access-control/user-authentication/m-p/507791#M5757 <HTML><HEAD></HEAD><BODY><P>The key on the VPN 3000 Concentrator is not configured correctly. The user cannot access the concentrator to change it because all access to the concentrator is being authenticated with the TACACS+ server.</P><P>If you know what key was entered in the VPN Concentrator, you can reconfigure that object's key in the server to match. </P><P></P><P>If you don't know what key was entered in the VPN Concentrator or you do not want to reconfigure the server, then you will need to access the concentrator through a direct connection to the console port and change the key with the command-line interface</P></BODY></HTML> Fri, 17 Mar 2006 21:30:55 GMT ssoberlik 2006-03-17T21:30:55Z User Authentication https://community.cisco.com/t5/network-access-control/user-authentication/m-p/507790#M5756 <P>I'm using a VPN 3000 Concentrator with Kerberos authentication (AD). 1 user cannot authenticate, all others do just fine. When I use the test feature on the concetrator, I get "Authentication Rejected: Unspecified." Any suggestions?</P> Fri, 21 Feb 2020 18:15:00 GMT https://community.cisco.com/t5/network-access-control/user-authentication/m-p/507790#M5756 agrimesdtcd 2020-02-21T18:15:00Z Re: User Authentication https://community.cisco.com/t5/network-access-control/user-authentication/m-p/507791#M5757 <HTML><HEAD></HEAD><BODY><P>The key on the VPN 3000 Concentrator is not configured correctly. The user cannot access the concentrator to change it because all access to the concentrator is being authenticated with the TACACS+ server.</P><P>If you know what key was entered in the VPN Concentrator, you can reconfigure that object's key in the server to match. </P><P></P><P>If you don't know what key was entered in the VPN Concentrator or you do not want to reconfigure the server, then you will need to access the concentrator through a direct connection to the console port and change the key with the command-line interface</P></BODY></HTML> Fri, 17 Mar 2006 21:30:55 GMT https://community.cisco.com/t5/network-access-control/user-authentication/m-p/507791#M5757 ssoberlik 2006-03-17T21:30:55Z