Page 1 of 1

account Lockout

Posted: Thu Jul 19, 2018 11:42 am
by jenstar13
Hi,
We have XI integrated with active directory, and lately active directory is being flakey, and locking people out of active directory
That''s fine we have a ticket with our windows team to find out what is going wrong.

The problem with respect to XI is that it's also locking the user out of XI and fusion even after the Active directory status is fixed and we DO NOT have account lockout enabled in XI

Do you have some place else that i have to make sure lockout is turned off?

thank you in advance

Re: account Lockout

Posted: Thu Jul 19, 2018 11:52 am
by jomann
Unfortunately the AD/LDAP component has to directly connect to the server and check authentication with it every time a user authenticates. So if the AD server is offline the users are not able to log in.

The way around it for XI is that you can set a user to allow local authentication even though they authenticate over AD. This means if the server can't connect to the AD server it'll fall back to the XI user's password. Once you check the box, the password field will appear in the User Edit page and you can set the password.

Re: account Lockout

Posted: Thu Jul 19, 2018 12:02 pm
by jenstar13
ok, thank you, you can close this, and thank you for the help