Problem:
Running an MVC 5 based solution which is using AD on prem for ID control. This solution depends on the UserPrincipal call to get a user. The error was occurring in code on this lineUserPrincipal user = UserPrincipal.FindByIdentity(ctx, IdentityType.SamAccountName, windowsaccountname);
It worked fine yesterday but just stopped working.
Solution:
Step 1:
Checked with our Admin staff and confirmed that a GPO had been applied against all accounts to include service accounts. The IIS app pool is using a service account to connect to the database.The policy turned on Smart card required property for the service account
Smart Card option active |
The obvious issue is that a service account is not going to use a smart card. So solution was to disable the smart card action and restart application pool.
Remove Smart card requirement |
Step 2:
Now getting this error!Not to worry this can be resolved by resetting the password in Active Directory
Change Password |
Step 3:
Now go to IIS and reset password on application pool for the web applicationAdd user name and password you changed in Step 2. |
No comments:
Post a Comment