Higher Education

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
Highlighted
Contributor II

ClearPass with Active Directory

Hello everyone:

 

How can I confirm ClearPass is working properly with Active Directory? Few days’ back all wireless users for a few minutes couldn’t authenticate against ClearPass. Currently, ClearPass is joined to AD. However, at the same time we got the calls regarding the users some computers in AD time out and Lync services etc. Hunch is that the system admin team did something in AD that caused the momentarily issue. Of course all wireless users having issues point to ClearPass. However, I couldn’t find anything wrong with ClearPass. If you do a packet capture in the controller you can see EAP drops but that would make sense if ClearPass cannot auth the users. I need to debug messages from ClearPass to AD but I don’t think ClearPass can debug this messages? Or do I have the ability? Any suggestion would be appreciated as always.

 

At the moment we don’t own a syslog server, we are in the process of demo few of them including Splunk and solar winds.

 

Thank you

Nils

3 REPLIES
Aruba

Re: ClearPass with Active Directory

you can enable debug on CPPM and you will see the transactions between CPPM and AD the issue is that you will need to do it when the issue happens. :) Screen Shot 2015-12-13 at 6.26.46 PM.png

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Frequent Contributor II

Re: ClearPass with Active Directory

when you look at a failure in access tracker, what does the alarm/failure tab tell you?
Scott McNeil - Sr. Network & Security Engineer, Global Process Automation
Network+ | CWNA | CWTS | ACSP | ACMP | ACMA | BREC
Contributor II

Re: ClearPass with Active Directory

The access tracker the Login Status for users was "Accept" no Rejects and the correct Role was being push.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: