ACS 5.1 - Active Directory Connection Suddenly Disconnected

[chaijoo_lau]

Hi All,

Recently our ACS loss connection to AD. Notice following error message (collect from show tech):

Dec  9 00:05:31 OasPrp-Lvl07-ACS01 adclient[24514]: INFO  <bg:ageBindings> base.

bind.healing Lost connection to myhqkul990003s.simedarbygroup.com. Running in di

sconnected mode: KDC refused skey: Preauthentication failed

Dec  9 00:05:31 OasPrp-Lvl07-ACS01 adclient[24514]: INFO  <bg:ageBindings> base.

bind.healing Lost connection to myhqkul990004s.simedarbygroup.com(GC). Running i

n disconnected mode: KDC refused skey: Preauthentication failed

Dec  9 00:05:31 OasPrp-Lvl07-ACS01 adclient[24514]: ERROR <bg:ageBindings> base.

adagent Can't use default machine password. Please reset computer account in Act

ive Directory

Dec  9 00:05:31 OasPrp-Lvl07-ACS01 adclient[24514]: INFO  <bg:ageBindings> base.

bind.healing Lost connection to myhqkul990003s.simedarbygroup.com. Running in di

sconnected mode: KDC refused skey: Preauthentication failed

Dec  9 00:05:31 OasPrp-Lvl07-ACS01 adclient[24514]: INFO  <bg:ageBindings> base.

bind.healing Lost connection to myhqkul990004s.simedarbygroup.com(GC). Running i

n disconnected mode: KDC refused skey: Preauthentication failed

Dec  9 00:05:31 OasPrp-Lvl07-ACS01 adclient[24514]: ERROR <bg:ageBindings> base.

adagent Can't use default machine password. Please reset computer account in Act

ive Directory

However we manage to restore the connection by reset password of the AD account that used in establish connection between AD and ACS.

What is the meaning of mean above message?

Regards,

Lau

[Tarik Admani]

Hi,

Did you try to configure another ACS server.....i.e (OasPrp-Lvl07-ACS02), if so then your issue with netbios, you can only have the first 15 characters of the hostname to be unique.

Its a known issue and is a microsoft limitation so please trim down the characters.

Thanks,

Tarik Admani
*Please rate helpful posts*