Forum

I don't have a packet capture, but the info I do have all points to a bad password. The radius server (also Cisco)states bad password, then user account locked out. I know this seems simple right, and why am I posting right. The account lock outs happen after the user is already logged into the domain on that station. This doesn't make sense to me! I assumed the station would cache the correct credentials for any subsequent reauthentications. This is when I started to think that the TKIP counter measures were causing the problems. BUT what does the TKIP counter measures have to do with user accounts? Ugh...I'm so confused.

I did find the section on the AP's to turn off the TKIP hold off times...thank you!