-
Title
Unable to log into PAR with Active Directory Credentials -
Description
While previously functional, users are suddenly unable to log into PAR with Active Directory Credentials
-
Cause
This can occur if the Domain Controller specified for WinAD or Distinguished Name are incorrectly configured
-
Resolution
To re-configure / verify correct configuration, perform the following.
1. Log into the https://DEVICE/paradmin and log in with the PARMASTER account
2. Select “System Status/Settings” | “External Authentication” | “WinAD Config”
3. Change the Server Address of the Configured WinAD System and click “Save Changes”
4. Next restart the integration agent by selecting “System Status/Settings” | “AD Integration” (Also titled “Integration Agent” in newer versions)
5. Click “Stop” and proceed to “Start” the service once stop has completed
6. Log out of the paradmin interface and close the browser7. Log into the https://DEVICE/par and log in with the PARADMIN account
8. Select “Systems, Accounts, & Collections” | “Systems” | “Manage Systems”
9. Click the “Listing” tab and proceed by clicking the “Windows Active Dir” system
10. Once the DC is selected, click the “Details” tab
11. Change the “Network Address” field and click “Save Settings”
12. Test the system by clicking “Test System”
13. To test the configured AD Integration, from the par URL select “Integration” | “Active Directory”
14. Select the “Listing” tab
15. Locate and select the Distinguished Name group and click the “Source” tab
16. For the “Distinguished Name” re-type the last character to trigger the “Validate DN” option
17. If successful, log out and close the browser18. To complete the testing, attempt to log into the https://DEVICE/par and attempt to log in/authenticate with a Domain User
19. If the User is still unable to login using AD credentials verify in ADUC that the User account is able to log on to the server. Open Active Directory Users and Computers MMC - Locate the User Account having issues - Verify Account is not locked - Account Tab - Log on to Button - Ensure the TPAM appliance is listed if Log On to is restricted or select All Computers and try again.