{"id":1578,"date":"2022-01-19T21:44:00","date_gmt":"2022-01-19T21:44:00","guid":{"rendered":"https:\/\/www.balajibandi.com\/?p=1578"},"modified":"2022-05-09T21:58:37","modified_gmt":"2022-05-09T20:58:37","slug":"ise-2-4-ad-join-issue","status":"publish","type":"post","link":"https:\/\/www.balajibandi.com\/?p=1578","title":{"rendered":"ISE 2.4 AD Join issue"},"content":{"rendered":"\n<p>I had an issue ISE 2.4 with Windows 2019 Server AD Join issue for the external identity source.<\/p>\n\n\n\n<p>I get Failed when I try to join.<\/p>\n\n\n\n<p>So I have tailed Log from CLI<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Login to ISE 2.4 Cli<\/li><li>show logging application ad_agent.log tail<\/li><\/ol>\n\n\n\n<p>I found the logs as below :<\/p>\n\n\n\n<p>WARNING,140565219899136,[LwKrb5GetTgtImpl ..\/..\/lwadvapi\/threaded\/krbtgt.c:329] KRB5 Error code: -1765328347 (Message: <strong>Clock skew too great<\/strong>),lwadvapi\/threaded\/lwkrb5.c:892<\/p>\n\n\n\n<p>then when i compare the time on Windows 2019 Server and ISE 2.4 it was more than 5min, then i adjusted the Clock on Windows 2019 server, also check the DNS records,  I am able to resolve my domain.<\/p>\n\n\n\n<p>After that, I can join  ISE to the domain AD.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"599\" height=\"176\" src=\"https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-14.png\" alt=\"\" class=\"wp-image-1579\" srcset=\"https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-14.png 599w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-14-300x88.png 300w\" sizes=\"auto, (max-width: 599px) 100vw, 599px\" \/><\/figure>\n\n\n\n<p>You can also do diagnostic :<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"980\" height=\"563\" src=\"https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-15.png\" alt=\"\" class=\"wp-image-1582\" srcset=\"https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-15.png 980w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-15-300x172.png 300w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-15-768x441.png 768w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-15-705x405.png 705w\" sizes=\"auto, (max-width: 980px) 100vw, 980px\" \/><\/figure>\n\n\n\n<p>If all working as expected you can retrieve the Group from AD as below :<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"692\" src=\"https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-16-1024x692.png\" alt=\"\" class=\"wp-image-1584\" srcset=\"https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-16-1024x692.png 1024w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-16-300x203.png 300w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-16-768x519.png 768w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-16-705x476.png 705w, https:\/\/www.balajibandi.com\/wp-content\/uploads\/2022\/05\/image-16.png 1066w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Happy Labbbbbing !<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I had an issue ISE 2.4 with Windows 2019 Server AD Join issue for the external identity source. I get Failed when I try to join. So I have tailed Log from CLI Login to ISE 2.4 Cli show logging application ad_agent.log tail I found the logs as below : WARNING,140565219899136,[LwKrb5GetTgtImpl ..\/..\/lwadvapi\/threaded\/krbtgt.c:329] KRB5 Error code: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,2],"tags":[],"class_list":["post-1578","post","type-post","status-publish","format-standard","hentry","category-ccie-sec","category-cisco"],"_links":{"self":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/1578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1578"}],"version-history":[{"count":3,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/1578\/revisions"}],"predecessor-version":[{"id":1586,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/1578\/revisions\/1586"}],"wp:attachment":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}