topic Identity Awareness stopped working in SASE and Remote Access

Identity Awareness stopped working

Sanjay_S — Tue, 01 Dec 2020 09:59:21 GMT

Hi All,

All of a sudden the working IA stopped.

Getting the below when checked. Any suggestions to resolve this quickly?

# adlog a dc
Adlog is not running, therefore cannot display domain controllers status

Thanks in Advance.

Re: Identity Awareness stopped working

Sanjay_S — Tue, 01 Dec 2020 11:10:28 GMT

Now i can see the adlog a dc shows as dc has connection. However i see the below.

# pdp m ip 10.x.x.x

daemon did not respond or not running!

Please let us know what could be the reason.

Re: Identity Awareness stopped working

Roy_Smith — Wed, 02 Dec 2020 15:58:47 GMT

I am also having a similar issue. We have a VSX cluster, with IA enabled on certain virtual systems. We have seen this happen a few times over the past few weeks. On 1 VS, adlog seems to be flapping. If I do

adlog a dc

I see the message:

"Adlog is not running, therefore cannot display domain controllers status"

a few minutes later, if run adlog again, I see all the domain controllers listed with 0 events, then a few minutes later the message above.

If I run pdp m ip 10.x.x.x I do actually get details returned.

IA on other virtual systems appears to be ok, except for intermittent servers being reported with the message:

connection had internal error [ntstatus = 0x80041032]

Any help with this would be appreciated.

Thanks in advance
Roy

Re: Identity Awareness stopped working

PhoneBoy — Thu, 03 Dec 2020 02:04:41 GMT

Are pepd and pdpd running?
Recommend involving the TAC to help troubleshoot this.