Symptoms

AD Query fails in cross-domain environment, when AAA AD Server has no administrator credentials configured and user's logon name is different from pre-win2k name

Impact

AD Query fails

Conditions

- AD Query is configured in an Access Policy. - The administrator's credentials are not specified at AAA AD Server configuration page (that is in use by AD Query). - The domain logon name is different from pre-win2k name.

Workaround

The administrator should provide AD administrator credentials at AAA AD Server configuration page.

Fix Information

AD Query now completes as expected if cross-domain option is enabled and administrator's credentials are not specified.

Behavior Change