Cisco ISE 1.2 - Problem with Device Onboarding of internal users using AD Credentials

Dear experts,
We have implemented ISE 1.2 with WLC 7.5 in our organization. We are using Device Onboarding by letting the users enter their AD Username and Passowrd on Guest portal which then redirects them to device registration portal where they simply register their device and they get internet access.
The problem is that some users are unable to authenticate using this portal while some can successfully authenticate and register their devices. All users are of the same group in AD. Also, we have enabled this check on two places. One is when users connects to the SSID where the security WPA2-Enterprise uses 802.1x and asks for AD username password. The other is on the portal.
All users are able to connect to the SSID using their AD credentials. However, 30% of the users are not being authenticated when they are redirected to the Guest portal for device registration. Also, it gives no error or event on either ISE or on the mobille device. When the users enters their credentials, the same guest portal page comes back blank with no errors or logs anywhere.
Can someone guide me if there is some configuration mistake that I may have done or have someone faced this same issue and were/weren't able to resolve it.
Thanks in advance.
Jay

Our problem got solved. It was related to a few user accounts in AD. Usually any authentication on AD User Account is carried out using the User ID. However, during Web Authentication, Login ID/Name is also checked by ISE and should be same as User ID.
The problem you are facing might also related be to AD since we had the similar issue. try to check this on a laptop as the mobile portal gives no error if the user is unknown or invalid. Also, you can enable logs for web authentication which are off by default. It will give you a pretty good idea where the problem lies. And yeah, do not keep the web authentications log on for long, it can hang your ISE.
Anyways, thanks for all the support.

Similar Messages

V570 problem with Intel onboard driver on Windows 7 Pro 64 bit

Hello Everyone,
I recently installed Windows 7 Pro 64 bit on my Lenovo v570. I downloaded the drivers from the support page and I have a strange problem with the onboard graphics driver "Intel Onboard Graphics Driver for Microsoft Windows 7 (64-bit) - Lenovo B470, B570, V370, V470, V570" in the drivers section.
Installation seems fine, but after restart, the system fails to boot and goes into boot recovery mode, where I get a message saying that booting failed due to a bad driver and the only actual option I have to boot up is to go back to a previous restore point. I tried installing the Nvidia driver for Windows 7, but it says that I need to install an Intel driver first, which is the one that gives me the blue screen when booting. I have also tried installing both drivers without a restart between both installations, but that didn't help.
I am wondering if anyone in the community has seen something similar. Any advice, information or assistance will be highly appreciated. Thank you very much in advance for your time.
Best regards,
Moe.
Solved!
Go to Solution.

Welcome to the Lenovo Community !
Check out the link I have posted below for video driver installation problems on your model. The suggestions offered have worked for others.
http://forums.lenovo.com/t5/Lenovo-C-E-K-M-N-and-V-Series/V570-video-drivers-don-t-work-with-Windows...
Owner & Operator of the following:
● Lenovo Ideapad Z570 w/ Win 7 & Win 8.1 Dual Boot ● Lenovo Yoga 3 Pro w/ Windows 8.1 ● Toshiba A75-S206 w/ Win 7
● IBM Thinkpad T-23 w/ Win XP ● IBM Thinkpad T-22 w/ Win XP • As well as multiple desktops dual/triple booting XP, Vista and Win 7.
★ Find a post helpful? Thank that member by clicking on the ☆Star☆ to the left awarding them a Kudo.
★ Posting a problem and a reply is helpful and it answers your question, please mark it as an "Accepted Solution"
★ I'm not a Lenovo employee, just a volunteer geek who likes to help folks. Enjoy your time here, pay it forward by helping others !
★ Sorry, I don't answer questions via Private Messages. Posting in the appropriate forum is the best way to get assistance.

I'm having a problem with device capture

I'm having a problem with device capture. I connect my Sony HC-90 via firewire. I can start the capture process in Premier 4 but then all control freezes.
Any ideas?
Thanks,
Jeff

Are they custom EQ settings in iTunes on the computer?
Per:
https://discussions.apple.com/message/17383922#17383922
"Do the EQ settings from my iTunes library transfer to my iPhone when I sync it"
Yes.
" thus causing my iPhone to over process the data when I turn it's EQ on? "
No. If the EQ ison, the iPhone will use the EQ setting you assigned in iTunes. It will use only the preset EQ. If you have a custom setting or do not have an EQ setting, it will not be used and will use the setting on the iPhone.

Hi, i have a macbook air and i've been having problems with the camera when i'm using skype. i know im no the 1st one and i'd like to know when apple or someone 'll do something about this.

hi, i have a macbook air and i've been having problems with the camera when i'm using skype. i know im no the 1st one and i'd like to know when apple or someone 'll do something about this.

Try reinstalling Combo Update.
http://support.apple.com/kb/DL1676
Best.

Im having problem with the dvd quality, I'm using compressor to convert the video fils from apple prores to mpeg2 .It doesn't matter how long my video is even if its just 5 minutes I'm getting cut edges in the video , does anyone have any idea ?

Im having a problem with the dvd quality, I'm using compressor to convert the video fils from apple prores to mpeg2 .It doesn't matter how long my video is even if its just 5 minutes I'm getting cut edges/lines in the video specialy if i have titles it comes up really bad , I took the same video to a friend of mine who have PC and he uses Encore , did the encoding there and it was just fine no problems! BTW I tried using doferent setings in compressor from CBR and VBR I even pushed up the setings to 8 or 9 BR and still no luck !
does anyone have any idea ?
Thanks in advence ...

Let's focus attention on just the Sony. (What model and what resolution are you shooting?)
For now, I'll assume you're shooting 1080i.
Take a representaive clip into a new sequence. Add a title.
In your sequence, make sure field dominance is set to Upper.
Set render settings to Pro Res 422.
After rendering, export QT self contained.
Import into Compressor (I'm now referring to v3.5).
Select the 90 minute Best quality DVD preset.
Open frame controls and turn on (click the gear icon). Set Resize filter to Best.
Submit burn and check quality on TV.
Good luck.

Can anyone please help me, I'm having problems with sound while watching video clips using flash player using Internet Explorer\

Can anyone please help me, I'm having problems with sound while watching video clips using flash player & Internet Explorer

There's a good chance that this is a known issue. We'll have a Flash Player 18 beta later this week that should resolve this at http://www.adobe.com/go/flashplayerbeta/

I downloaded Firefox 7 and when I click on the browser icon nothing happens, the browser does not load on desktop.I had no problems with Firefox 4 I had been using for several years and liked very much

I downloaded Firefox 7 and when I click on the browser icon nothing happens, the browser does not load on desktop.I had no problems with Firefox 4 I had been using for several years and liked very much

Most people have no problems with installing firefox as an upgrade, but there are quite a few things that can cause problems. Please have a look at the articles
* [[software Update Failed]] <-- clickable link (blue ) --
* [[firefox will not start]]
* [[firefox does not work]]
Post back after you read them and say what you tried. Have you ensured you used an admin account, possibly needing to check the UAC setting, and that security software is not blocking the changes. You should certainly try starting in firefox's [[safe mode]] either from a menu/icon option or by holding the shift key as you attempt to run firefox.
Is the browser icon you see on the desktop, and a firefox icon ?

I am having problems with downloading Windows Support Software by using Boot Camp Assistant. Is there somewhere else I can download from?

I am having problems with downloading Windows Support Software by using Boot Camp Assistant. Is there somewhere else I can download from?

No. There is no other location. Be patient. Read the posts in the Bootcamp Forum. There are hundreds of posts about your issue and what to do. https://discussions.apple.com/community/windows_software/boot_camp

Cisco ISE trying to posture a device that should not be able to be postured

Overview:
Cisco ISE version 1.1.4. Windows PC will be postured using Web NAC agent. Mobile devices (Apple/Android) can't be postured and will be exempted from posturing. Mobile devices will be exempted using the condition EndPoints:PostureApplicable EQUALS No. This worked fine and mobile devices will be caught by this condition while Windows device will be caught by another that sends to posturing.
Mobile device authorisation policy configured:
Problem:
A few days later, mobile devices doesn't seem to end up in the policy that has EndPoints:PostureApplicable EQUALS No. After having a look at monitoring, Cisco ISE is classifies mobile devices as Posturable. The Posture Status previously was "NotApplicable" now shows up as "Pending". See below.
Troubleshooting:
I tried a total of 4 different mobile devices. 2 Apple and 2 Android. All of them have the Posture Status of "Pending". Interestingly after a few tries, both the Androids starting working and have the PostureStatus of "NotApplicable", no configuration changes were made. The 2 Apple device still doesn't work and show up as "Pending".
I have restarted ISE, Access Point and Apple device. I have also tried other Apple device. All with the same problem.
Have any of you guys experienced this before?

Hi,
I have also experienced the same issues as yourself and would recommend opening a tac case. However I have used the device registration web portal to redirect all previous detected mobile devices to accept the aup and have them statically assigned to an endpoint group so they do not hit this scenario.
I know it is a workaround but its the only way i could get this to work and not affect devices that were one time detected as such.
Tarik Admani
*Please rate helpful posts*

Cisco Prime Infrastructure 2.1 GUI authentication via RADIUS server (Cisco ISE 1.2 integrated with AD)

Hi,
I want to access Cisco PI 2.1 GUI using my AD credentials, so on PI I've enabled RADIUS AAA Mode and added RADIUS servers (two ISE nodes in our case). On ISE I added PI as RADIUS client and configured the same keys. Next, on ISE I created authorization profile PRIME_ADMIN_ACCESS with only attribute settings defined:
My authentication and authorization rules relating that case are as on following screenshots:
So when I open GUI of PI and enter my AD credentials to log in I have no success and I receive following message:
Looking in ISE's Authentication section I can see following:
Time difference between these two authentication/authorizations is just 25 msecs and clicking on each of them reveals following:
So at first I can authenticate and authorize (authorization profile has necessary attributes defined for PI management access (NCS:role0=Root, NCS:virtual-domain0=ROOT-DOMAIN)) and after 25 msecs I am getting failure. So what could be cause of such things and how I can successfully log in to PI GUI authenticating via ISE using AD credentials?

Hi,
-- Please Go to Administration > Logging > set the Message level to TRACE > Click save
-- Then try to add the ISE.
-- Once it fails, collect the logs from Administration > Logging >
check the "ncs-0-0.log" & search the file for "ERROR" & paste the results here. This will give us exact reason.
- Ashok
Please rate the post or mark as correct answer as it will help others looking for similar information

Cisco ISE 1.2.x with Posture Configuration - Windows Patches

Hi, Anybody has any experience in integrating Cisco ISE Posture with Microsoft SCCM?
With WSUS this works fine, but with SCCM I don't have any idea how to proceed. Anybody knows what it's included in the predefined rules
pr_WSUSRule and pr_WSUSCheck? I can't find any information in ISE Console or Cisco documentation.
Thanks.

Once agent performs the posture checks containing the windows hotfix checks, if the administrator configured the Launch Program Posture Remediation , agent will launch the script file which will initiate the windows hotfix updates via SCCM client configuration manager pre-installed/pre-configured on the box.

EA4500 - Problem with devices - Can't modify/delete devices

Hi everyone.
I have a little problem with my router.
When I go to Device List and try to delete any device, I have an error pop-up:
I try to re-flash with the same firmware, reset, but nothing to do...
Actual firmware is: FW_EA4500_2.1.39.145204.SSA
Regards.

For the forums it seems IE 11 isn't compatible with the cloud website.
You can get access to the router using other browsers or IE versions by disconnecting the ISP device from the internet port on the router and opening http://192.168.1.1
I don't recommend using software to configure your router or the cloud. Just my opinion
I like the classic firmware anyway.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

Problem with LAN onboard

I have problem with MSI 875P NEO. I am upgrade a BIOS and then i dont disable LAN onboard. Help me!!!!

Dear friend,
I, likewise borgunit, still could find out in anyways whether you want to have LAN enable or disable... Maybe you should follow Danny's instruction to find out whether that is what you are looking for .

Cisco Prime 2.1 problem with API/Client

Hi,
im having a problem with the API output i get from Cisco Prime Infrastructure. The URL im trying to GET info from is:
https://<URL>/webacs/api/v1/data/Clients
The output shows that im missing data from a specific ID. Example:
{"@url":"https:\/\/prime.lmv.lm.se\/webacs\/api\/v1\/data\/Clients\/1280389614","@type":"Clients","$":"1280389614"}
Then i try to GET the info regarding this ID: https://<URL>/webacs/api/v1/data/Clients/1280389614
{"errorDocument":{"httpResponseCode":500,"httpMethod":"GET","message":"No such entity as Clients \/ 1280389614.-PRS-101","id":"presentation.PRS-101","uriPath":"data\/Clients\/1280389614","queryParams":"{}"}}
So something is wrong here, so when i add ".full=true" parameter i get the following error as it cannot show the client data:
https://<URL>/webacs/api/v1/data/Clients.json?.full=true&.firstResult=1000&.maxResults=1000
{"errorDocument":{"httpResponseCode":500,"httpMethod":"GET","message":"Exception while invoking valueOf method 'getEnum' of enumeration class 'class com.cisco.ncs.nbi.client.ClientProtocolEnum'; nested exception is org.hibernate.HibernateException: Exception while invoking valueOf method 'getEnum' of enumeration class 'class com.cisco.ncs.nbi.client.ClientProtocolEnum'","exception":"org.springframework.orm.hibernate3.HibernateSystemException: Exception while invoking valueOf method 'getEnum' of enumeration class 'class com.cisco.ncs.nbi.client.ClientProtocolEnum'; nested exception is org.hibernate.HibernateException: Exception while invoking valueOf method 'getEnum' of enumeration class 'class com.cisco.ncs.nbi.client.ClientProtocolEnum'","uriPath":"data\/Clients","queryParams":"{.full=[true], .firstResult=[1000], .maxResults=[1000]}"}}
Any idea how to solve this issue, how can i find the client that is causing this problem? In my script im reading all the clients in the network to a third party application. But right now its hard to get this output in a smart way. It might be resolved in 2.2, but it feels like the data i corrupt in some way so i doubt that this error is related to the version?
Best Regards // Mattias Andersson

Hi,
I have also run into this problem on two different Prime 2.1-systems when trying to get all Client-data available. I haven't figured out a way to fix it more than making small calls (.maxResults=100) then trying to pin-point and skip the ID giving the error. I've been using 2.2 for a while now but haven't tested the Client-API that much yet. I'll experiment some more on it and see if I can recreate the problem to see if it's related to the version.

Problems with device memory withs new apps and upgrades!

Dear all,
I'm having problems with my memory device. I have installed thes apps:
- Blackberr battery watch
- Bejewled
- Google Maps
- Level
- Ispeech translator
- Octopuzzle
- Shazam Encore
- Simcity Deluxe
- The Light flashlight
- Unit converter premium
- Vlingo
- Weather eye
- Whatsapp Messenger
And it says my 128 Mb device memory is full. How can i clean up this issue so I can continue upgrading and make my device a little more organized.
Thanks!

Hey marcoaramini,
Welcome to the forums.
This article should help you with freeing up some memory on your BlackBerry smartphone.
How to Maximize Battery Life and Free Memory on the BlackBerry smartphone
-SR
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

Cisco ISE 1.2 - Problem with Device Onboarding of internal users using AD Credentials

Similar Messages

Maybe you are looking for