Руководство По Устранению Ошибки для Cisco Cisco Identity Services Engine 1.2
Contents
Introduction
Prerequisites
Requirements
Components used
Problem
Solution
Related Information
Introduction
This document describes the solution to Identity Services Engine (ISE) authentications failing
against active directory (AD) due to error 24371 caused by insufficient ISE machine account
privileges.
against active directory (AD) due to error 24371 caused by insufficient ISE machine account
privileges.
Prerequisites
Requirements
Cisco recommends that you have basic knowledge of these topics:
ISE configuration and troubleshooting
●
Microsoft Active Directory
●
Components used
The information in this document is based on these software and hardware versions:
ISE version 1.3.0.876
●
Microsoft AD version 2008 R2
●
The information in this document was created from the devices in a specific lab environment. All of
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any command.
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any command.
Problem
AD authentications fail due to error 24371
In ISE 1.3 and above, authentications can fail against the AD with error 24371. The detailed
authentication report for the failure will have steps similar to those shown here:
authentication report for the failure will have steps similar to those shown here:
The AD status shows joined and connected and the required AD groups have been added
correctly in the ISE configuration.
correctly in the ISE configuration.