ISE authorization reject

[kingstdz]

Hi

we have ISE after migration to 3.2 we have some issue with user in wireless and NAD, before it verify user in AD after found it it execute policy normaly, now after migration it go directly  to defaut and reject all.

we have deleted ISE 1 and 2 from AD and joined again with account admin 

please help us thanks

with wireless 

Event	5400 Authentication failed
Failure Reason	15039 Rejected per authorization profile

Endpoint Profile	Windows11-Workstation
Authentication Policy	Wireless Access >> Wireless 802.1X
Authorization Policy	Wireless Access >> Default
Authorization Result	DenyAccess

with NAD before each switch i haved access with my AD account but now no access and give tacacs 

Message Text	Failed-Attempt: Authentication failed
Failure Reason	24408 User authentication against Active Directory failed since user has entered the wrong password
Resolution	Check the user password credentials. If the RADIUS request is using PAP for authentication, also check the Shared Secret configured for the Network Device
Root Cause	User authentication against Active Directory failed since user has entered the wrong password

[balaji.bandi]

What WLC controller and code runnning

Looks for me configuration issue - so validate the config :

Event5400 Authentication failed Failure

Reason15039 Rejected per authorization profile

https://www.youtube.com/watch?v=OCqLRzuqCW8

[kingstdz]

thanks for reply

but the problem is in joining ise to ad , it s operationnel but it can t retrieve groupe that why policy by default is executed and reject

i must fix security ad for ise

best regards

[balaji.bandi]

Not sure until we see the full logs, if you know the ISE and AD side, can you look the Logs at AD why you not able to retrieve the data ?