topic Re: Cisco ISE Domain join issue in Network Access Control

Cisco ISE Domain join issue

suganthankumar — Fri, 24 Feb 2023 17:24:12 GMT

Error Description: A Service Is Not Available That Is Required To Process The Request

Support Details...
Error Name: LW_ERROR_KRB5KDC_ERR_SVC_UNAVAILABLE
Error Code: 41759

Detailed Log:
01:17:04 Joining To Domain NTTA.COM Using User Domadmin
01:17:04 Searching For DC In Domain NTTA.COM
01:17:04 Found DC: NTTADC1.nttapdemo.com , Client Site Is Singapore-Site , Dc Site Is Singapore-Site
01:17:04 Checking Credentials For User Domadmin
01:17:04 Getting TGT For Account username@NTTA.COM
01:17:11 Searching For DC In Domain NTTA.COM
01:17:11 Found DC: NTTADC2.ntta.com , Client Site Is Singapore-Site , Dc Site Is Singapore-Site

Re: Cisco ISE Domain join issue

balaji.bandi — Fri, 24 Feb 2023 17:40:26 GMT

check the below thread :

https://community.cisco.com/t5/network-access-control/error-joining-ise-to-ad-domain/td-p/4314566

Re: Cisco ISE Domain join issue

suganthankumar — Sat, 25 Feb 2023 06:35:59 GMT

Hi,

Sorry am new to cisco. Currently experimenting the ISE tool.I have followed the steps u shared. But still stuck while processing stage (12/120).

*DNS Records are reachable

*NTP in both AD and ISE is ok

Re: Cisco ISE Domain join issue

balaji.bandi — Sat, 25 Feb 2023 10:11:55 GMT

Is this directly connected or any Firewall between AD and ISE ? so check you have allowed the required ports in Firewall.

since I am not able to read the correctly image can you post Failed one extracting more information?

Re: Cisco ISE Domain join issue

thomas — Tue, 28 Feb 2023 20:53:46 GMT

Sorry, you have nothing other than a few log entries here.

Please see and provide more information or call TAC and they can troubleshoot it with you.