Security

Reply
MVP

Guest MAC Authentication Reject

Some guests are able to login, others aren't.

 

In the logs I see the following:

 

2016-11-16 13:08:43,904[AuthReqThreadPool-6-0x7fcb22359700 r=R000846cd-01-582c4c4b h=26] WARN Util.ParameterizedString - getReplacedStrings: Failed to replace parameString =SELECT
2016-11-16 13:08:43,904[AuthReqThreadPool-6-0x7fcb22359700 r=R000846cd-01-582c4c4b h=26] ERROR ExtDB.DBQuery - execute: Failed to construct filter=SELECT
2016-11-16 13:08:43,904[AuthReqThreadPool-6-0x7fcb22359700 r=R000846cd-01-582c4c4b h=26] ERROR ExtDB.DBQuery - Failed to get value for attributes=AccountEnabled, AccountExpired]
Error Message:
User authentication failed
 Alerts for this Request  
Policy serverFailed to construct filter=SELECT
CASE WHEN expire_time is null or expire_time > now() THEN 'false'
ELSE 'true'
END AS is_expired,
CASE WHEN enabled = true THEN 'true' ELSE 'false' END as is_enabled
FROM tips_guest_users
WHERE ((guest_type = 'USER') AND (user_id = '%{Endpoint:Username}') AND (app_name != 'Onboard')).
Failed to get value for attributes=[AccountEnabled, AccountExpired]
RADIUS[Endpoints Repository] - localhost: User not found.
MAC-AUTH: MAC Authentication attempted by unknown client, rejected.

Re: Guest MAC Authentication Reject

Hi,

 

Have you confirmed that the user trying to MAC auth is in the endpoint respository?

 

Cheers

James


Cheers
James
----------------------------------------------------------------------
--------------------------@whereisjrw--------------------------
---------------------------------blog-------------------------------
ACCX #540 | ACMX #353 | ACDX #216 | AMFX #11
----------------------------------------------------------------------
----------------------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
vln
New Contributor

Re: Guest MAC Authentication Reject

PLS help - some problem.

Some users don`t  give access.

In guest portal: "policy definition error: unknown mode '%1'"

in clear pass policy manager :

Policy serverFailed to construct filter=SELECT
CASE WHEN expire_time is null or expire_time > now() THEN 'false'
ELSE 'true'
END AS is_expired,
CASE WHEN enabled = true THEN 'true' ELSE 'false' END as is_enabled
FROM tips_guest_users
WHERE ((guest_type = 'USER') AND (user_id = '%{Endpoint:Username}') AND (app_name != 'Onboard')).
Failed to get value for attributes=[AccountEnabled, AccountExpired]
RADIUS[Endpoints Repository] - localhost: User not found.
MAC-AUTH: MAC Authentication attempted by unknown client, rejected.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: