User disabled

steelej's Avatar

steelej

14 Jan, 2016 06:08 PM

I have a single user whose account keeps coming up as disabled. I haven't seen this with anyone else. Is this a known problem?

I'm running 7.14.2.

  1. 1 Posted by Ryan Griffith on 14 Jan, 2016 06:32 PM

    Ryan Griffith's Avatar

    Hi Jim,

    I have a couple of questions to see if we can narrow things down a bit:

    • Are you able to enable this user and it just goes back to disabled afterwards? If so, does the disable occur immediately, or at a later time?
    • Is this user an LDAP user?
    • Do you have any Web Services scripts that may be updating this user?

    Please let me know if you have any questions.

    Thanks!

  2. 2 Posted by steelej on 14 Jan, 2016 06:35 PM

    steelej's Avatar

     

     

    From: Ryan Griffith [***@***]
    Sent: Thursday, January 14, 2016 1:33 PM
    To: Steele, James <[email blocked]>
    Subject: Re: User disabled [General #23536]

     

    // Please reply above this line
    ==================================================

    From: Ryan Griffith (Support staff)

    Hi Jim,

    I have a couple of questions to see if we can narrow things down a bit:

    • Are you able to enable this user and it just goes back to disabled afterwards? If so, does the disable occur immediately, or at a later time?

    I have had it immediately disable a couple of times. 

    • Is this user an LDAP user?

    Yes, an LDAP user

    • Do you have any Web Services scripts that may be updating this user?

    None that I know of.

    Please let me know if you have any questions.

    Thanks!

    On Thu, Jan 14 at 10:08 AM PST, steelej wrote:

    I have a single user whose account keeps coming up as disabled. I haven't seen this with anyone else. Is this a known problem?

    I'm running 7.14.2.

    Having trouble reading this? View this discussion online: User disabled.

    To unsubscribe and stop receiving emails from http://help.hannonhill.com, visit this page

     

  3. 3 Posted by Ryan Griffith on 14 Jan, 2016 06:52 PM

    Ryan Griffith's Avatar

    Thank you for following up, Jim.

    I have had it immediately disable a couple of times.

    Can you recall if you were able to submit the edit page and it literally went right back to being disabled when you got to the view screen (or soon after), or did you see any errors when clicking submit?

    Yes, an LDAP user

    Do you by chance have Deactivate orphaned users selected in your LDAP configuration?

    Thanks!

  4. 4 Posted by steelej on 14 Jan, 2016 06:54 PM

    steelej's Avatar

    Yes it is.

    From: Ryan Griffith [mailto:[email blocked]]
    Sent: Thursday, January 14, 2016 1:52 PM
    To: Steele, James <[email blocked]>
    Subject: Re: User disabled [General #23536]

    // Please reply above this line
    ==================================================

    From: Ryan Griffith (Support staff)

    Thank you for following up, Jim.

    I have had it immediately disable a couple of times.

    Can you recall if you were able to submit the edit page and it literally went right back to being disabled when you got to the view screen (or soon after), or did you see any errors when clicking submit?

    Yes, an LDAP user

    Do you by chance have Deactivate orphaned users selected in your LDAP configuration?

    Thanks!

  5. 5 Posted by Ryan Griffith on 14 Jan, 2016 07:31 PM

    Ryan Griffith's Avatar

    Thank you for following up to confirm, Jim.

    Do you by chance have automatic synchronization enabled? If so, let's go ahead and manually run a sync and check the generated report on your Dashboard to see if this specific user is listed as orphaned at the very bottom.

    Please let me know if you have any questions.

    Thanks!

  6. 6 Posted by steelej on 14 Jan, 2016 07:35 PM

    steelej's Avatar

    She is indeed listed as orphaned.

    From: Ryan Griffith [mailto:[email blocked]]
    Sent: Thursday, January 14, 2016 2:31 PM
    To: Steele, James <[email blocked]>
    Subject: Re: User disabled [General #23536]

    // Please reply above this line
    ==================================================

    From: Ryan Griffith (Support staff)

    Thank you for following up to confirm, Jim.

    Do you by chance have automatic synchronization enabled? If so, let's go ahead and manually run a sync and check the generated report on your Dashboard to see if this specific user is listed as orphaned at the very bottom.

    Please let me know if you have any questions.

    Thanks!

    On Thu, Jan 14 at 10:54 AM PST, steelej wrote:

    Yes it is.

  7. 7 Posted by Ryan Griffith on 14 Jan, 2016 07:38 PM

    Ryan Griffith's Avatar

    Perfect, thank you for checking, Jim.

    So next steps here will be to determine why she is being orphaned and either adjust her LDAP account so she matches your LDAP configuration Policy(ies), or adjust your LDAP configuration policy(ies) so she is no longer orphaned.

    Worst case scenario, you could always change the orphaned users action from Deactivate to Ignore, but in the long run it could potentially make maintaining or purging those disabled, orphaned users more difficult.

    Please let me know if you have any questions.

    Thanks!

  8. 8 Posted by steelej on 14 Jan, 2016 08:36 PM

    steelej's Avatar

    All set. Thanks.

  9. steelej closed this discussion on 14 Jan, 2016 08:36 PM.

  10. steelej re-opened this discussion on 15 Jan, 2016 03:05 PM

  11. 9 Posted by steelej on 15 Jan, 2016 03:05 PM

    steelej's Avatar

    At least I thought I was all set. I corrected the problem that was causing my user to be disabled. She had somehow been removed from the LDAP group. She is in the proper LDAP group. Her account is enabled. I ran LDAP sync and it didn't orphan her account. I can switch to the user fine. However she says she can't log in.

  12. 10 Posted by Ryan Griffith on 15 Jan, 2016 03:28 PM

    Ryan Griffith's Avatar

    Hi Jim,

    If the user is enabled and you are able to assume the user's identity, it sounds like an issue with either the password she is entering (or if it's expired on the LDAP side) or the bind information stored by Cascade (ie the DN next to Authentication when viewing the user).

    Please let me know if you have any questions.

    Thanks!

  13. Support Staff 11 Posted by Tim on 26 Jan, 2016 06:00 PM

    Tim's Avatar

    Hi Jim,

    Just checking in here to see if you were able to resolve this issue. Let us know if you're still having trouble.

    Thanks!

  14. 12 Posted by steelej on 28 Jan, 2016 04:37 PM

    steelej's Avatar

    Tim,

    I asked her to verify any further problems and she hasn't replied. Please close the ticket.

    Jim

    ________________________________

  15. Support Staff 13 Posted by Tim on 28 Jan, 2016 04:52 PM

    Tim's Avatar

    OK, just let us know if you run into any similar troubles in the future and we'll be happy to help out. Take care, Jim!

  16. Tim closed this discussion on 28 Jan, 2016 04:52 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac