the credentials cannot be verified

[YPF-Martin]

Hello,
i have the following problem..
i have an activecliente agent in win xp sp2, in some computers when
user tries to log on, he recieve the message "error: the credentials
cannot be verified". We made some tests to solve the problem, but we
couldn't do it. We need help. Thanks


--
YPF-Martin
------------------------------------------------------------------------
YPF-Martin's Profile: http://forums.techarena.in/member.php?userid=51474
View this thread: http://forums.techarena.in/showthread.php?t=985080

http://forums.techarena.in

 

[David H. Lipman]

From: "YPF-Martin" <YPF-Martin.3awbjc@DoNotSpam.com>

| Hello,
| i have the following problem..
| i have an activecliente agent in win xp sp2, in some computers whenuser tries to log on,
| he recieve the message "error: the credentialscannot be verified". We made some tests to
| solve the problem, but wecouldn't do it. We need help.

| Thanks--
| YPF-Martin

When I get this it usually indicates the user put in his Smart Card and the workstation was
unable to autrhenticate the user on the Domain.

This could be because the user's account was not provisioned or provisioned properly on the
Domain.

The user has not ben on that PC before and the user's credentials have not been cached and
the workstation is unable to communicate with a Domain Controller to perform authentication.

I assume when you say "activecliente agent" you mean ActivClient by ActivIdentity.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

 

[YPF-Martin]

yes, extacly, is activeclienty by activeidentity.. so what can i do to
solve the problem?


--
YPF-Martin
------------------------------------------------------------------------
YPF-Martin's Profile: http://forums.techarena.in/member.php?userid=51474
View this thread: http://forums.techarena.in/showthread.php?t=985080

http://forums.techarena.in

 

[David H. Lipman]

From: "YPF-Martin" <YPF-Martin.3ax0jg@DoNotSpam.com>

| yes, extacly, is activeclienty by activeidentity.. so what can i do to
| solve the problem?
|

Read what I wrote and go back to the problematic computers.

What version of ActivClient are you using ?


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

 

[YPF-Martin]

the version is 6.1, we tested with another cards, reinstalling the
client, even cleaning the registry keys, it doesn't work with none
card. We have the problem only with 4 or five users all around the
company, and if we try to log in into another computer, it just works.
So, we don't know what else to do. Once we are logged Into the machine
with the problem (using user an pass without the card) the system read
the card properly, the certificates are recognized by the CRL, and
there isn't any log file reporting an error. We tried with a 5.4 client
version, and the machine shows the same error. we just followed the
Activeidentity Troubleshooting guide to try to solve this problem, but.
As you can see, we couldn't.


--
YPF-Martin
------------------------------------------------------------------------
YPF-Martin's Profile: http://forums.techarena.in/member.php?userid=51474
View this thread: http://forums.techarena.in/showthread.php?t=985080

http://forums.techarena.in

 

[David H. Lipman]

From: "YPF-Martin" <YPF-Martin.3ax63c@DoNotSpam.com>

| the version is 6.1, we tested with another cards, reinstalling the
| client, even cleaning the registry keys, it doesn't work with none
| card. We have the problem only with 4 or five users all around the
| company, and if we try to log in into another computer, it just works.
| So, we don't know what else to do. Once we are logged Into the machine
| with the problem (using user an pass without the card) the system read
| the card properly, the certificates are recognized by the CRL, and
| there isn't any log file reporting an error. We tried with a 5.4 client
| version, and the machine shows the same error. we just followed the
| Activeidentity Troubleshooting guide to try to solve this problem, but.
| As you can see, we couldn't.
|
| --
| YPF-Martin

Yes, that's the Vista compliant version of ActiveClient, v6.1.

Have you tried issuing the users new Smart Cards.

BTW: If this is a US Gov't. installation, please feel free to email me to take this
offline.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

 

[YPF-Martin]

uhmm.. no i'm not from the US gov..xD im from Repsol-Ypf, so there is no
problem. We tried with other Smartcards without result. So we're still
lost.. Could you give us some help?


--
YPF-Martin
------------------------------------------------------------------------
YPF-Martin's Profile: http://forums.techarena.in/member.php?userid=51474
View this thread: http://forums.techarena.in/showthread.php?t=985080

http://forums.techarena.in

 

[monteduncan]

Dave,

Some of our systems are experiencing the same thing. Users can use
their smart card and successfully logon to one workstation but not
others. These workstations with unsuccessful logons are connected to the
network and had been working fine until about a week ago. We suspect
updates may have been pushed out which caused this, but don't know for
sure. We have tried changing the card readers and drivers (to no avail)
just to remove them from suspicion.
At the problem workstations, the user can unplug from the network and
authenticate locally using their smart card, so we know it is somewhere
between the machine and the active directory authentication. Any ideas
you may have would be welcomed. Please feel free to contact me via email
as we are a gov't installation.

The workstations are using XPsp2

Monte


--
monteduncan
------------------------------------------------------------------------
monteduncan's Profile: http://forums.techarena.in/member.php?u=52370
View this thread: http://forums.techarena.in/showthread.php?t=985080

http://forums.techarena.in