Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM, Install/Upgrade
Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 17.0.0, 17.0.0.1, 17.0.0.2
Fixed In:
16.1.0, 15.1.4, 14.1.4.4
Opened: Jan 19, 2021 Severity: 3-Major
NTLM User logon authentication fails every week with RPC return code 0xC0000022(STATUS_ACCESS_DENIED) from the Active Directory (AD) server.
NTLM Authentication fails after a week. APM end user client logon (such as Outlook users, Remote Desktop Users, and Browser-based NTLM Auth logons that use BIG-IP APM as forward/reverse proxy) fails, and the service is down.
-- Upgrading from legacy versions to BIG-IP v14.1.2 or later. -- AD servers are updated with latest security patches from Microsoft.
To resolve the issue temporarily, use either of the following: -- Reset the NTLM Machine Account with the 'Renew Machine Password' option. -- Run the command: bigstart restart nlad The problem can reappear after a week, so you must repeat these steps each time the issue occurs.
None