When users of a certain AD group attempt to log in to Dynamics SL 2015 they are given the "The user name or password provided is incorrect. 3" error. We are certain that the password and username are not actually the issue as the users know to use "Domain\Username", which we have verified they are doing and also not making a typo - and when we tell them to enter an incorrect password on purpose the error message changes to just "The user name or password provided is incorrect."
When they enter the right password it changes to "The user name or password provided is incorrect. 3"
We can't quite figure out why that one group in particular is causing the issue. I've checked to make sure there are no duplciate SIDs or GUIDs. We thought maybe there was an issue with the group having several nested groups within it, however once we tried troubleshooting by removing the users from the main group and then just adding to subgroups one at a time, the behavior went away. We can't keep the users removed from the trouble group forever, as it enables many people to do their job.
The log on the webserver for the webapp says:
12/8/2017 7:59 AM Login PrincipalOperationException The network path was not found.
(Client: 10.xx.xx.xx)
at System.DirectoryServices.AccountManagement.CredentialValidator.BindSam(String target, String userName, String password)
at System.DirectoryServices.AccountManagement.CredentialValidator.Validate(String userName, String password, ContextOptions connectionMethod)
at System.DirectoryServices.AccountManagement.PrincipalContext.ValidateCredentials(String userName, String password, ContextOptions options)
at Microsoft.Dynamics.SL.Mobile.UIHelper.impersonateValidUser(String userName, String domain, String password)
at Microsoft.Dynamics.SL.Mobile.HomeController.Index(LoginModel model, String returnUrl)
Which doesn't seem very helpful. I'm not sure what network path it would be looking for?
*This post is locked for comments