Reset Search
 

 

Article

NAC rejecting all 802.1x authentications with Access denied (0xc0000022)

« Go Back

Information

 
TitleNAC rejecting all 802.1x authentications with Access denied (0xc0000022)
Symptoms
  • NAC rejecting all 802.1x authentications with Access denied (0xc0000022) (In FreeRADIUS log)
  • NAC Manager showing "Authentication request became stale" in version 6.3
  • Recent power outage on AD 
Environment
  • Extreme Control
  • NetSight NAC
Cause
Active directory permissions issues with the NAC computer account within the AD itself. Full details unknown.
Resolution
  1. Remove the NAC computer object from active directory
  2. SSH to NAC appliance
  3. Run the following command 
    nacctl restart && tail -f /var/log/tag.log
  4. Watch the output to make sure the NAC successfully joined the active directory with the "joined active directory XXXXXX" message
Additional notes
Example FreeRADIUS output of the error

Tue Nov 22 09:30:09 2016 : Info: [mschap] Creating challenge hash with username: TestUser
Tue Nov 22 09:30:09 2016 : Info: [mschap] Client is using MS-CHAPv2 for TestUser, we need NT-Password
Tue Nov 22 09:30:09 2016 : Info: [mschap] expand: --username=%{ETS-NTLM-Auth-Username} -> --username=TestUser
Tue Nov 22 09:30:09 2016 : Info: [mschap] expand: --domain=%{ETS-NTLM-Auth-Domain} -> --domain=maritime.edu
Tue Nov 22 09:30:09 2016 : Info: [mschap] Creating challenge hash with username: TestUser
Tue Nov 22 09:30:09 2016 : Info: [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=9d5a86ec2342f9f5
Tue Nov 22 09:30:09 2016 : Info: [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=d3ecc5c59351d5052261c17af7ce8b0cddcb48a68a3a69d1
Tue Nov 22 09:30:10 2016 : Debug: Exec output: Access denied (0xc0000022)
Tue Nov 22 09:30:10 2016 : Debug: Exec plaintext: Access denied (0xc0000022)

Tue Nov 22 09:30:10 2016 : Info: [mschap] FAILED: MS-CHAP2-Response is incorrect

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255