AD Authentication errors
  • 07 Nov 2023
  • 1 Minute to read
  • Dark
    Light
  • PDF

AD Authentication errors

  • Dark
    Light
  • PDF

Article summary

LDAP Error Code 49

Symptoms

Users are unable to log in. The following error is encountered:

javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 701, v1db0]

Causes

There could be many reasons for the issue. Please check the error code (in the example above, it's 701) and match it with the description in the following table:

Error codeDescription
525User not found
52eInvalid credentials
530not permitted to logon at this time
531not permitted to logon at this workstation
532password expired (remember to check the user set in osuser.xml also)
533account disabled
701account expired
773The user must reset the password
775user account locked

In the above example, the error code is 701 (account expired)

Resolution

Since the issue often originates from Active Directory, consult with the AD administrator for resolution.


Was this article helpful?