Good afternoon,
We are in the process of validating a True SSO configuration and have found that when launching our RDSH application, we receive the following error on the RDSH Server, on which the application is launched, we obtained these logs from the RDSH Server Agent Debug logfile:
2020-07-08T12:36:00.235-05:00 WARN (1A14-08D0) <2256> [LogonUI] cred::ReportResult(): Reported authentication failure. Status=0xC000006D (WinErr=1326) and subStatus=0xC000040C (WinErr=-2146892968).
Status : The user name or password is incorrect.
subStatus : The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.
2020-07-08T12:36:00.235-05:00 DEBUG (1A14-08D0) <2256> [LogonUI] `anonymous-namespace'::SignalUnityEvent: Successfully opened event vmwarewsnm\NotReadyForUnity4. Signaling it now.
2020-07-08T12:36:00.235-05:00 DEBUG (1A14-08D0) <2256> [LogonUI] cred::ReportResult(): Returned error 'The attempted logon is invalid. This is either due to a bad username or authentication information. The revocation status of the domain controller certificate used for authentication could not be determined. There is additional information in the system event log.'.
Any pointers as to what may be causing this?
Looks like your CRL is unreachable. Investigate if the CRL published by your enterprise CA is reachable.
What is the login process? Are you using Kerberos auth from WSO Access and then attempting to launch the app?
Looks like your CRL is unreachable. Investigate if the CRL published by your enterprise CA is reachable.
What is the login process? Are you using Kerberos auth from WSO Access and then attempting to launch the app?
nburton935 CRL was not reachable, implemented FW change and hey ho, all good.
