ISE 3.0 Admin login issue with AD

[fuhrersk8]

Hello;

We are having issues trying to login with AD users into the ISE. 

All steps in Document ID: 116503 have been followed. 

We have ISE version 3.0.0.458.  

Where can we see failed authentications attempts? In the Administrator Logins report, only successful logins are being logged.  

Thanks for your support.

Regards, 

[Milos_Jovanovic · Accepted solution]

Hi @fuhrersk8,

Although this document is correct, it might not be easiest way to follow it up, as there is a huge difference between versions. Take a look at this article, where guys explained it in great way, with v2.4, which is much closer to v3.0.

I did such an integration, and it is straight forward, but I don't have it next to me to check your question about logs. I would expect to find this information in Admin Logins too. Most likely, t you are hitting CSCvu63833 (less likely CSCvx43566), so I would advise to go for latest patch 4.

After patching, try again to check what is going on.

BR,

Milos

[fuhrersk8]

Hello Milos and thanks for your reply;

It is working now; it was an issue with permissions in the AD to properly retrieve user groups attributes.

On the other hand, we are at latest Patch 4 and still never got those logs from the failed login attempts into ISE...

Does anyone know if this is already fixed?

Thanks again for your support.

Regards,

[Milos_Jovanovic]

Hi @fuhrersk8,

If you already deployed patch 4 and still facing same issue, I would advise opening TAC case, as it could be something else in your case.

BR,

Milos

[Amen]

Hello, I think iam facing this BUG https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu63833 

but in 

version 3.0.0.458

Ptach 7

do you have any idea what it can be? and is this is already a known issue or not?

thanks in advance 

[Greg Gibbs]

Duplicate post. See https://community.cisco.com/t5/network-access-control/cisco-probleme-with-connecting-with-active-directory/td-p/4915622