Integration ISE with samba4

MarcinS — Sat, 03 Dec 2022 22:38:28 GMT

Hi,
I am working in a request where the SAMBA4 is working as Active Directory. When im trying to authenticate the user by 802.1x i got an error:

5400 Authentication failed
24403 User authentication against Active Directory failed

Search for matching accounts at join point - AD.local
Single matching account found in domain - AD.local
Identity resolution detected single matching account
RPC Logon request failed - STATUS_CONNECTION_ABORTED,ERROR_RPC_NETLOGON_FAILED,test@AD.local
Communication with domain controller failed - samba4.AD.local,ERROR_RPC_NETLOGON_FAILED
RPC Logon request failed - STATUS_CONNECTION_ABORTED,ERROR_RPC_NETLOGON_FAILED,test@AD.local
Communication with domain controller failed - samba4.AD.local,ERROR_RPC_NETLOGON_FAILED
RPC Logon request failed - STATUS_CONNECTION_ABORTED,ERROR_RPC_NETLOGON_FAILED,test@AD.local
Communication with domain controller failed - samba4.AD.local,ERROR_RPC_NETLOGON_FAILED
Failover threshold has been exceeded
User authentication against Active Directory failed - AD

When im chosed the test option i external identity sources
when i set Authentication Type as kerberos i got an success result

Test Username : test
ISE NODE : ise.ad.local
Scope : Default_Scope
Instance : ad
Authentication Result : SUCCESS

but when i leave the option MS-RPC i got an error
Error : Authentication Encountered An Error Due To Network, AD DNS Misconfiguration. This May Be A Temporary

I was tryed also add integration as ldap but when i choose the "test bind to server" i got an error:
Ldap bind ended with an error

Im working on ise 3.1

I would be greatfull for help do resolve this problem

Re: Integration ISE with samba4

Mark Elsen — Sun, 04 Dec 2022 07:55:02 GMT

- Check logs on the samba server too when this happens ,

Re: Integration ISE with samba4

pgiouvanellis — Fri, 10 Mar 2023 10:46:34 GMT

Did you manage to solve this issue ?

We are facing a smilar issue with our ISE Deployment.

Thanks

Re: Integration ISE with samba4

balaji.bandi — Fri, 10 Mar 2023 11:05:03 GMT

official not support i guess here - contact TAC.

topic Integration ISE with samba4 in Network Access Control

Integration ISE with samba4

Re: Integration ISE with samba4

Re: Integration ISE with samba4

Re: Integration ISE with samba4