Bug ID 984765: APM NTLM auth fails every week with RPC return code 0xC0000022(STATUS_ACCESS_DENIED)

Last Modified: Jul 23, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP APM, Install/Upgrade(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2

Fixed In:
16.1.0

Opened: Jan 19, 2021
Severity: 3-Major

Symptoms

NTLM User logon authentication fails every week with RPC return code 0xC0000022(STATUS_ACCESS_DENIED) from the Active Directory (AD) server.

Impact

NTLM Authentication fails after a week. APM end user client logon (such as Outlook users, Remote Desktop Users, and Browser-based NTLM Auth logons that use BIG-IP APM as forward/reverse proxy) fails, and the service is down.

Conditions

-- Upgrading from legacy versions to BIG-IP v14.1.2 or later. -- AD servers are updated with latest security patches from Microsoft.

Workaround

To resolve the issue temporarily, use either of the following: -- Reset the NTLM Machine Account with the 'Renew Machine Password' option. -- Run the command: bigstart restart nlad The problem can reappear after a week, so you must repeat these steps each time the issue occurs.

Fix Information

None

Behavior Change