CUCM End User Log on failed - Invalid User ID or Password.

[Zafar Ullah]

All the user were login to CCM user page successfully before but now it gave me   Error Message Invalid User ID or Password

I have checked the logs and it seems to be issue with Active Directory.I have reset the password on AD and  performed  LDAP Synchronozation

but no luck Any help will be appricaited

2012-12-27 16:59:49,374 DEBUG [http-8443-1] impl.AuthenticationLDAP - makeConnection: Creating InitialDirContext

2012-12-27 16:59:49,478 ERROR [http-8443-1] impl.AuthenticationLDAP - makeConnection: Throwing exception.javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 532, v1db1

Thanks

[Harmit Singh]

Hi Zafar,

Yes this is an issue on AD end. The error points to the LDAP password getting expired. You could try using ADSIEdit and confirm / change the following attributes of the "LDAP Manager Distinguished Name":

Account-Expires = 9223372036854775807

ms-DS-User-Dont-Expire-Password = 1

ms-DS-User-Account-Disabled = f

If this still doesnt work, try deleting the LDAP Manager from AD and creating a new one and configuring LDAP Directory and Authentication with the new name and password accordingly.

HTH.

Regards,

Harmit.

[Zafar Ullah]

Hi Harmit

Thanks for your reply.Could you please explain it in detail Or send me any link if I can go through

Thanks

Zafar

[Harmit Singh]

Hi Zafar,

You wont find a cisco document on this as such. Here is what I found on Microsoft:

http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/474abb8f-cfc6-4cac-af79-c3e80e80291f

Check the list below as reference regarding all error codes.

525​	user not found ​
52e​	invalid credentials ​
530​	not permitted to logon at this time​
531​	not permitted to logon at this workstation​
532​	password expired ​
533​	account disabled ​
701​	account expired ​
773​	user must reset password ​
775​	user account locked

HTH.

Regards,

Harmit.