- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
01-30-2018 11:02 PM
Hello everyone,
One of our customers has a ClearPass setup with Publisher/Subscriber, where the Subscriber is on a different location. They want to use Onboard for the employee devices. For the Publisher everything works as expected, but on the Subscriber, the Onboard Portal page is shown, one is able to log in with the AD Credentials, you can see an Acceppt Message in the ClearPass, but the Client gets the error: "Invalid response from publisher (No session key in response)". This error is independent form the device to onboard.
Could anyone help me withe a clue where this issue comes from?
Regards,
Marian
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
01-30-2018 11:07 PM
| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: ClearPass Onboard error in Publisher/Subscriber setup: No session key in response
01-30-2018 11:10 PM
Does "should" mean it does not work on the subscriber, or does it mean that it is better to direct the the user to the Publisher?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: ClearPass Onboard error in Publisher/Subscriber setup: No session key in response
01-31-2018 01:56 AM
It shouldn't ;) matter if you onboard on pub or or sub. There are mechanics in the background that handles the sync between the pub and subs.
That said - can you verify that the sync between the pub and sub is OK? Or is there a high latency between them? What about the clock - are they in sync?
Regards
John Solberg
-ACMX #316 :: ACCX #902 :: ACSA
Aruba Partner Ambassador
Intelecom/NetNordic - Norway
----------------------------
Remember to Kudo if a post helped you! || Problem Solved? Click "Accept as Solution" in a post!
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: ClearPass Onboard error in Publisher/Subscriber setup: No session key in response
01-31-2018 02:35 AM
Both servers use an internal ntp server, so time should be in sync, but there is a WAN connection between the servers.
BTW. Guest works fine with the subscriber.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: ClearPass Onboard error in Publisher/Subscriber setup: No session key in response
02-07-2018 12:21 AM
I finally mitigated this issue by redirecting to the publisher only.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: ClearPass Onboard error in Publisher/Subscriber setup: No session key in response
04-03-2019 06:23 PM
HI All,
i've just run into this issue myself in 6.6.
My understanding was also that you could complete guest and onboard operations on a subscriber, provided that the publisher was reachable.
Is this no longer the case?
Scott
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator