I've contacted TAC but I'm in a world of hurt with 22000+ users...
Problem started around 1 pm today and is growing rapidly:
2015-01-05 15:39:52,326 | [Th 1193 Req 1631729 SessId R00023f2d-01-54ab04a8] ERROR RadiusServer.Radius - rlm_mschap: AD status:Reading winbind reply failed! (0xc0000001) |
2015-01-05 15:39:52,326 | [Th 1193 Req 1631729 SessId R00023f2d-01-54ab04a8] ERROR RadiusServer.Radius - rlm_mschap: FAILED: MS-CHAP2-Response is incorrect |
is the primariy message I see inside the log files of the CPPM (version 6.4.3 which we just moved to 12/20/14). Since it started mid-day, I'm not as inclined to think it is the upgrade. Users get correct roles, etc. The error message makes me think it is a bad username/password combo but not everyone in the district simultaneously forgot their password after using it correctly in the morning??!!??
Alerts tab:
MSCHAP: AD status:Reading winbind reply failed! (0xc0000001)
MSCHAP: AD status:Reading winbind reply failed! (0xc0000001)
MSCHAP: AD status:Reading winbind reply failed! (0xc0000001)
MSCHAP: Authentication failed
EAP-MSCHAPv2: User authentication failure
We're going to try rebooting AD servers first.
Any ideas? Suggestions?
**Additional**
Machine authentications are doing it as well