Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 27 subscribers
  • Views 6172 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Client Authentication Agent - You are not allowed to log in from this machine

apijnappels

After trying to log in the CAA I get this message.

Credentials are AD domain credentials. I have tried both with OTP and without (after toggling OTP for user portal ON/OFF) but it makes no difference, in both cases I get the same message.

If I do enter an incorrect password, it will tell me Invalid username/password, so it looks like the password entered is correct.

Under Administration - Device Access I have enabled Client Authentication on LAN zone (which is where the client is also connecting). I have also enabled AD SSO on LAN zone to see if that changes anything but it doesn't seem to make a difference.

What am I missing?



This thread was automatically locked due to age.
Parents Reply
  • +1 in reply to apijnappels

    Found the reason... For some reason the option "Mac Binding" was enabled on the AD imported groups and after that also on the authenticated user.

    Authentication worked only from the first MAC-address which was immediately set as the only MAC-address from where the user was able to login. 

    Now disabled it for the users and also on the imported AD groups.

Children
No Data