Hello sorry about my bad english, hope it helps
Log in as administrator user, and simply go to captive portal and make sure that the user you are controlling is not conected alredy!
OR
Go to users and select the user, then in Kerberos stablish parameters for Principal expiration and Pw expiration
good luck!