Higher Education

last person joined: 14 days ago 

Got questions on how to enable mobility in education? Submit them here!
Back to discussions
Expand all | Collapse all

ClearPass with Active Directory

This thread has been viewed 1 times

  • 1.  ClearPass with Active Directory

    Posted Dec 13, 2015 06:42 PM

    Hello everyone:

     

    How can I confirm ClearPass is working properly with Active Directory? Few days’ back all wireless users for a few minutes couldn’t authenticate against ClearPass. Currently, ClearPass is joined to AD. However, at the same time we got the calls regarding the users some computers in AD time out and Lync services etc. Hunch is that the system admin team did something in AD that caused the momentarily issue. Of course all wireless users having issues point to ClearPass. However, I couldn’t find anything wrong with ClearPass. If you do a packet capture in the controller you can see EAP drops but that would make sense if ClearPass cannot auth the users. I need to debug messages from ClearPass to AD but I don’t think ClearPass can debug this messages? Or do I have the ability? Any suggestion would be appreciated as always.

     

    At the moment we don’t own a syslog server, we are in the process of demo few of them including Splunk and solar winds.

     

    Thank you

    Nils



  • 2.  RE: ClearPass with Active Directory

    EMPLOYEE
    Posted Dec 13, 2015 07:28 PM

    you can enable debug on CPPM and you will see the transactions between CPPM and AD the issue is that you will need to do it when the issue happens. :) Screen Shot 2015-12-13 at 6.26.46 PM.png



  • 3.  RE: ClearPass with Active Directory

    Posted Dec 13, 2015 07:33 PM
    when you look at a failure in access tracker, what does the alarm/failure tab tell you?


  • 4.  RE: ClearPass with Active Directory

    Posted Dec 14, 2015 11:47 AM

    The access tracker the Login Status for users was "Accept" no Rejects and the correct Role was being push.