10-27-2011 12:46 PM
Hi All,
AD user accounts are getting disabled very frequently , and our security consultant enables them , then people are able to login to portal.
trying to find why these users are getting disabled.
below is the log.
CUSTOMLOGIN_EXCP_CRP_00005g_(E008)
[EXCEPTION]
javax.naming.AuthenticationException: LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 533, vece
Could you please suggest on how to proceed.
Regards
Chsr
Edited by: chsr on Oct 27, 2011 1:49 PM
10-27-2011 11:26 PM
Hi,
that log message does not help to identify why accounts are disabled. Data 533 is returned when account is disabled. Hence that log message says that authentication failed because account is disabled. You need to look for other message to determine why accounts are getting blocked.
Cheers
10-28-2011 7:01 AM
Hi Martin,
Thank you very much for your response,
Could you please let me know what logs i can check to determine why these users are getting disabled.
Regards
Chsr
10-29-2011 12:15 AM
Hi,
I would try AD log first but i am not Microsoft expert so I can't hel youhere. I would try to confirm that user gets locked by SAP.
Good luck