I haven't seen that one yet; only when it is just down. Do you see anything in the user access log the first time that shows failure? What does your policy trace show for the differences? What does the client log say? ... View more

I use a special service account in AD which has the proper rights to create objects and do the queries in AD. But thats not an adminaccount in that trusted domain. Trusted domains are managed by other admins. It works with all other trusted domains till now - the problem only occures with users from this one trusted domain. By the way - the Lithium format of this forum sucks little bit. Why juniper does not use a "normal,well known" forum format like they use it on www.juniperforum.com? Its would be easier to handle for the users who want to participiate on this forum. On this lithium-forum, pages take some seconds to open, and each time i want to post something, i have to login, and then i am not on that threat-side where i want to post, but i have to click several clicks and wait some seconds to type my answer. Message Edited by dusannovakovic on 02-28-2008 10:07 PM ... View more

well another thing i found is that if you have the clustering enabled as active passive or even active active and have synchronize log messages between the cluster memebers that cuases more problems as well. I have had the box crash multiple times with diffrent reasons but all under load of around 1700-1800 users. ... View more