Community
Vault Forum
Welcome to Autodesk’s Vault Forums. Share your knowledge, ask questions, and explore popular Vault topics.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Vault Collaboration timeout causes AD locking

20 REPLIES 20
SOLVED
Reply
Message 1 of 21
VChampDK
2018 Views, 20 Replies

Vault Collaboration timeout causes AD locking

When staying idle for a while the Vault C. apparently times out.

Sometimes I can just login again but often (several times in a week) it locks my AD access and therefore my Windows logon doesn't work until an IT administrator reconnects my AD account.

 

Any resolution for this?

Peer
Iv2018/Vault Professional 2018
Lenovo ThinkStation P720
Intel Xeon Gold 5122 - 3.6GHZ
32GB RAM - Win10/64Bit
Lenovo Thinkvision 27"; 2560 x 1440
nVidia Quadro P2000 - 5GB 25.21.14.1771
3Dconnexion SpaceNavigator 10.5.4

20 REPLIES 20
Message 2 of 21
JamesMcMullen
in reply to: VChampDK

Hello Peer,

 

In talking with Product Support, Active Directory has a setting that can disable a user when they authenticate many times over a period of time.  Is it possible to have IT increase that setting?  What is happening is when you are going idle and you lose the Vault license we will attempt to relogin in for you.  This may lead to you hitting this Active Directory threshold.

 

-Jim


James McMullen
Principal SQA Eng.
Message 3 of 21
VChampDK
in reply to: JamesMcMullen

When is the relogin attempt taking place?

When I engage the Vault again or all the time?

I ask because the default "passwordAttemptWindow" is 10 minutes and if Vault C. is timing out and tries to relogin after the 10 minutes the AD will lock me out, correct?

The lockout is usually happening after a lunch break or after attending a meeting.

In the Web.Config file on the Vault Server there is an entry "connections timeout = 15".

Has that any relevance to this issue?

Peer
Iv2018/Vault Professional 2018
Lenovo ThinkStation P720
Intel Xeon Gold 5122 - 3.6GHZ
32GB RAM - Win10/64Bit
Lenovo Thinkvision 27"; 2560 x 1440
nVidia Quadro P2000 - 5GB 25.21.14.1771
3Dconnexion SpaceNavigator 10.5.4

Message 4 of 21
JamesMcMullen
in reply to: VChampDK

In talking to others, the login we use just queries the AD and does not send a username/password.  Is it possible that another program is running in the background using an old username/password?  I am still asking around about the specifics of how login works.  If I come up with something else, I will pass it along.


James McMullen
Principal SQA Eng.
Message 5 of 21
VinceBalge
in reply to: VChampDK

We've experienced the same problem with Windows Authentication when we switched to 2011 Vault Pro. I've since switched back to Vault user names but would switch back to Windows Authentication if this behavior could be controlled.

 

Vince

IV2011 Vault Pro 2011

Message 6 of 21
VChampDK
in reply to: JamesMcMullen

An interesting thing happened today:

I logged out of the Vault C. during my lunch break, logged in again successfully and everything went well until I should print a drawing on a network printer and it failed because I was locked out of my network connections / Windows AD.

I wonder why I could access the Vault Server...

Peer
Iv2018/Vault Professional 2018
Lenovo ThinkStation P720
Intel Xeon Gold 5122 - 3.6GHZ
32GB RAM - Win10/64Bit
Lenovo Thinkvision 27"; 2560 x 1440
nVidia Quadro P2000 - 5GB 25.21.14.1771
3Dconnexion SpaceNavigator 10.5.4

Message 7 of 21
VChampDK
in reply to: VinceBalge

Autodesk just released a hotfix that resolved this issue.

Remember to apply Service Pack 1 first.

 

DL15651099

 

http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=15651099&linkID=9242019

Peer
Iv2018/Vault Professional 2018
Lenovo ThinkStation P720
Intel Xeon Gold 5122 - 3.6GHZ
32GB RAM - Win10/64Bit
Lenovo Thinkvision 27"; 2560 x 1440
nVidia Quadro P2000 - 5GB 25.21.14.1771
3Dconnexion SpaceNavigator 10.5.4

Message 8 of 21
mdurst
in reply to: VChampDK

The hotfix you gave a link is to be applied to Inventor 2011 SP1.  Isn't the issue described here with Vault Workgroup, Collaboration and Professional?  I currently have a customer with this same exact issue.  They just upgraded from ProductStream 2009 to Vault Professional 2011.  They are using AutoCAD Mechanical and Electrical.  No Inventor.

 

They use Windows Authentication to login to Vault and IT has to keep unlocking their accounts.  This is happening to all their users.

The error they receive is attached.  After the account is unlocked in AD, they can then login to the Vault.

 

Has anyone found a fix for this?

Message 9 of 21
VChampDK
in reply to: mdurst

Regardless it worked resolving my Vault Collaboration 2011 issue which is the exact same as you describe.

I haven't had a lock out since applying this hotfix.

Peer
Iv2018/Vault Professional 2018
Lenovo ThinkStation P720
Intel Xeon Gold 5122 - 3.6GHZ
32GB RAM - Win10/64Bit
Lenovo Thinkvision 27"; 2560 x 1440
nVidia Quadro P2000 - 5GB 25.21.14.1771
3Dconnexion SpaceNavigator 10.5.4

Message 10 of 21
VinceBalge
in reply to: VChampDK

I applied the hot fix last week and switched back to Windows Authentication and have not been locked out since.

I can now switch all my users back.

Thanks

 

Vince Balge

Message 11 of 21
mdurst
in reply to: VChampDK

I will log this with Autodesk and report how far I get with them for users that do not have Inventor installed.  Thanks for the reply guys.

Message 12 of 21
PAULAVILES8959
in reply to: VinceBalge

I believe there is Vault 2011 SP2. Is the fix still needed if SP2 is installed? I think the original file name is autodeskvault2011update_2.zip

 

We are not experiencing the issue yet, but would like to prevent it if possible.

 

Regards,

 

Paul Aviles

Message 13 of 21
mollons
in reply to: PAULAVILES8959

Vault 2011 SP2 will fix the issue for the Vault Clients, the Office add-in, and any AutoCAD based add-ins.

To make sure you do not experience the problem with Inventor you need to install the Inventor fix here:

http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=15651099&linkID=9242019

 

 



Scott Mollon
Quality Assurance
Autodesk, Inc.

Be sure to check out the Vault Help Wiki!
Message 14 of 21
PAULAVILES8959
in reply to: mollons

Scott, thanks for the quick update.

 

To make sure I follow you. I have installed SP2 in both the server and clients. Does the hotfix needs to be installed also on both server and client?

 

Also, what is the diff between DL15651099.zip and the one with the Subscription Bonus.

 

We have Vault 2010 Pro, Inventor Routed and Autocad 2010 just in case.

 

Regards,

 

Paul Aviles

Message 15 of 21
mollons
in reply to: PAULAVILES8959

I am confused, what vault release are you using?

I thought you said you had installed Vault 2011 SP2?

 



Scott Mollon
Quality Assurance
Autodesk, Inc.

Be sure to check out the Vault Help Wiki!
Message 16 of 21
mdurst
in reply to: mdurst

Guys,

 Inventor has a hotfix for this so you may be asking what about if users are only using AutoCAD and not Inventor and are experiencing this issue.  Well, the hotfix for AutoCAD was released a couple weeks ago.  My customer applied this hotfix and has not been locked out of Active Directory since and is using Windows Authentication when logging into the Vault.

 

Using Vault Professional 2011 SP2 and AutoCAD Mechanical 2011.

 

The additional hotfix has been released and is available here: http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=15803692&linkID=9261341

 

Again, this corrects a behavior for all other addins but Inventor (the Inventor hotfix was previously posted).

Message 17 of 21
PAULAVILES8959
in reply to: mdurst

Sorry you are correct it is 2011..

Message 18 of 21
mollons
in reply to: PAULAVILES8959

Vault 2011 SP2 needs to be installed on both Client and Server.

The Inventor hotfix needs to only be installed on the machines running Inventor.

 

 



Scott Mollon
Quality Assurance
Autodesk, Inc.

Be sure to check out the Vault Help Wiki!
Message 19 of 21
PAULAVILES8959
in reply to: mollons

Thanks Scott,

 

Last question

 

Also, what is the diff between DL15651099.zip and the one with the Subscription Bonus.?

Message 20 of 21
mollons
in reply to: PAULAVILES8959

The only difference is that one applies to an Inventor install which hsa the Subscription Bonus pack installed and other one for Inventor without it.

 



Scott Mollon
Quality Assurance
Autodesk, Inc.

Be sure to check out the Vault Help Wiki!

Can't find what you're looking for? Ask the community or share your knowledge.

Post to forums  

Autodesk Design & Make Report