When staying idle for a while the Vault C. apparently times out.
Sometimes I can just login again but often (several times in a week) it locks my AD access and therefore my Windows logon doesn't work until an IT administrator reconnects my AD account.
Any resolution for this?
Solved! Go to Solution.
Solved by VChampDK. Go to Solution.
Hello Peer,
In talking with Product Support, Active Directory has a setting that can disable a user when they authenticate many times over a period of time. Is it possible to have IT increase that setting? What is happening is when you are going idle and you lose the Vault license we will attempt to relogin in for you. This may lead to you hitting this Active Directory threshold.
-Jim
When is the relogin attempt taking place?
When I engage the Vault again or all the time?
I ask because the default "passwordAttemptWindow" is 10 minutes and if Vault C. is timing out and tries to relogin after the 10 minutes the AD will lock me out, correct?
The lockout is usually happening after a lunch break or after attending a meeting.
In the Web.Config file on the Vault Server there is an entry "connections timeout = 15".
Has that any relevance to this issue?
In talking to others, the login we use just queries the AD and does not send a username/password. Is it possible that another program is running in the background using an old username/password? I am still asking around about the specifics of how login works. If I come up with something else, I will pass it along.
We've experienced the same problem with Windows Authentication when we switched to 2011 Vault Pro. I've since switched back to Vault user names but would switch back to Windows Authentication if this behavior could be controlled.
Vince
IV2011 Vault Pro 2011
An interesting thing happened today:
I logged out of the Vault C. during my lunch break, logged in again successfully and everything went well until I should print a drawing on a network printer and it failed because I was locked out of my network connections / Windows AD.
I wonder why I could access the Vault Server...
Autodesk just released a hotfix that resolved this issue.
Remember to apply Service Pack 1 first.
DL15651099
http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=15651099&linkID=9242019
The hotfix you gave a link is to be applied to Inventor 2011 SP1. Isn't the issue described here with Vault Workgroup, Collaboration and Professional? I currently have a customer with this same exact issue. They just upgraded from ProductStream 2009 to Vault Professional 2011. They are using AutoCAD Mechanical and Electrical. No Inventor.
They use Windows Authentication to login to Vault and IT has to keep unlocking their accounts. This is happening to all their users.
The error they receive is attached. After the account is unlocked in AD, they can then login to the Vault.
Has anyone found a fix for this?
Regardless it worked resolving my Vault Collaboration 2011 issue which is the exact same as you describe.
I haven't had a lock out since applying this hotfix.
I applied the hot fix last week and switched back to Windows Authentication and have not been locked out since.
I can now switch all my users back.
Thanks
Vince Balge
I will log this with Autodesk and report how far I get with them for users that do not have Inventor installed. Thanks for the reply guys.
I believe there is Vault 2011 SP2. Is the fix still needed if SP2 is installed? I think the original file name is autodeskvault2011update_2.zip
We are not experiencing the issue yet, but would like to prevent it if possible.
Regards,
Paul Aviles
Vault 2011 SP2 will fix the issue for the Vault Clients, the Office add-in, and any AutoCAD based add-ins.
To make sure you do not experience the problem with Inventor you need to install the Inventor fix here:
http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=15651099&linkID=9242019
Scott, thanks for the quick update.
To make sure I follow you. I have installed SP2 in both the server and clients. Does the hotfix needs to be installed also on both server and client?
Also, what is the diff between DL15651099.zip and the one with the Subscription Bonus.
We have Vault 2010 Pro, Inventor Routed and Autocad 2010 just in case.
Regards,
Paul Aviles
I am confused, what vault release are you using?
I thought you said you had installed Vault 2011 SP2?
Guys,
Inventor has a hotfix for this so you may be asking what about if users are only using AutoCAD and not Inventor and are experiencing this issue. Well, the hotfix for AutoCAD was released a couple weeks ago. My customer applied this hotfix and has not been locked out of Active Directory since and is using Windows Authentication when logging into the Vault.
Using Vault Professional 2011 SP2 and AutoCAD Mechanical 2011.
The additional hotfix has been released and is available here: http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=15803692&linkID=9261341
Again, this corrects a behavior for all other addins but Inventor (the Inventor hotfix was previously posted).
Vault 2011 SP2 needs to be installed on both Client and Server.
The Inventor hotfix needs to only be installed on the machines running Inventor.
Thanks Scott,
Last question
Also, what is the diff between DL15651099.zip and the one with the Subscription Bonus.?
The only difference is that one applies to an Inventor install which hsa the Subscription Bonus pack installed and other one for Inventor without it.