AAA, NAC, Guest Access & BYOD

List of AD errors for which Domain Services are not restarted

Aruba Employee

Question- ClearPass doesn't restart domain services automaticaly

Environment- All ClearPass versions upto 6.4.x

Answer- ClearPass can be configured to restart the domain services automatically by setting the recovery action to "Restart Domain Service" under the RADIUS parameters for each server.

However ClearPass doesn't restart the domain service for the following errors generated by AD:

  • 0xC000006D - STATUS_LOGON_FAILURE
  • 0xC000006E - STATUS_ACCOUNT_RESTRICTION
  • 0xC000006F - STATUS_INVALID_LOGON_HOURS
  • 0xC0000071 - STATUS_PASSWORD_EXPIRED
  • 0xC0000072 - STATUS_ACCOUNT_DISABLED
  • 0xC0000064 - STATUS_NO_SUCH_USER
  • 0xC000006E - STATUS_ACCOUNT_RESTRICTION
  • 0xC000006C - STATUS_PASSWORD_RESTRICTION
  • 0xC000006A - STATUS_WRONG_PASSWORD
  • 0xC0000193 - STATUS_ACCOUNT_EXPIRED
  • 0xC000006F - STATUS_INVALID_LOGON_HOURS
  • 0xC0000234 - STATUS_ACCOUNT_LOCKED_OUT
  • 0xC0000224 - STATUS_PASSWORD_MUST_CHANGE
  • AD statusSmiley Tongueassword-Change: No Password-Change-Error: Password restriction
Version history
Revision #:
1 of 1
Last update:
‎04-05-2015 02:31 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: