ACS V3.2,

[shareq]

i have many accounts on my ACS V3.2,which is on win 2k server,the authentication is using domain.

some users are complaining that they cannot connect but some users can connect the same time.

when i receive the call i usually connect from my home and stop/restart the ACS Service and it works.

i want to know why is that and how i can resolve it.

now i am facing it every day or two.

[nihal.akbulut]

Hi,

what are the error messages when the problem occur? you can look at reports and activity tab, and check especially failed attemps report.

[aschiebe]

It's possible that accounts are being disabled as a result of a policy (in the domain or in ACS).

Check the group settings of those users who can't connect.

Is this happening to all users or only some ?

Which ACS Service do you restart ? look at the appropriate log file (tcs.log for T+ , rds.log for Radius and auth.log for external DB info).

[shareq]

those are normal users who access the RAS,they get "error 691 access was denied because the username and or password was invalid on the domain"

when i see failed attempts in ACS it shows "External DB user invalid or bad password" in the failure authentication code.

after restart of the ACS service from the system configuration tab service control it will work fine for those users.please suggest me !!!!

[bmelzow]

Check the event log on the server where you have the Acs software installed. Under the security section of the event log it should show the failed attempts. We had a similar problem and the ACS software was trying to authenticate the users to the wrong domain. I know that the ACS software should check all domains listed but it still was not working. The only fix that we have foung is to have the users precede their username with their domains. If you do find a fix for this problem please let me know as well.

Thanks, Billy