User Authentication Issues - Cisco 3.3 User Manual

User Authentication Issues

User Authentication Issues
Condition
After the administrator disables the Dialin
Permission setting, Windows database users can
still dial in and apply the Callback string
configured under the Windows user database.
(You can locate the Dialin Permission check box
by clicking External User Databases, clicking
Database Configuration, clicking Windows
Database, and clicking Configure.)
User did not inherit settings from new group.
Authentication fails.
The AAA client times out when authenticating
against a Windows user database.
User Guide for Cisco Secure ACS for Windows Server
A-20
Recovery Action
Restart Cisco Secure ACS services. For steps, see
Stopping, Starting, or Restarting Services,
page 8-2.
Users moved to a new group inherit new group
settings but they keep their existing user settings.
Manually change the settings in the User Setup
section.
Check the Failed Attempts report.
The retry interval may be too short. (The default is
5 seconds.) Increase the retry interval
(tacacs-server timeout 20) on the AAA client to
20 or greater.
Increase the TACACS+/RADIUS timeout interval
from the default, 5, to 20. Set the Cisco IOS
command as follows:
tacacs-server timeout 20
radius-server timeout 20
Appendix A Troubleshooting
78-16592-01