1. Add below entry in "/etc/sssd.conf" file under the domain configuration tag "[domain/(insert domain name)]".
ad_gpo_access_control = permissive
Explanation:
Because if GPO-based logon access is set to "denied", domain user will not able to login to Netvault and will get the access restriction error
E.g. you may see this error "Authentication error: Domain user validation failed due to access restrictions. Check Domain Controller for more details."
2. Restart the SSSD service with below command
#systemctl restart sssd
3. Stop and start the Netvault service as
To stop and start use below commands
#systemctl stop netvault
<<<Wait for few minutes>>>
#systemctl start netvault
check if Secure Mode (Users and Groups | Set Password Policy | Secure Mode) is enabled if yes then disable it.
Explanation:
Because the authentication module in NetVault service loads configuration when it starts so any further changes in configuration will not be addressed until NetVault service get restarted.
Note: after stopping the NetVault service wait for 2-3 minutes before starting it again.
