Auth server did not reply in time or auth module is too busy using aruba

[joe1979]

yes tacacs key is correct in clearpass server and other parameter.

[cjoseph]

Okay.  Can the firewall team see hits from the controller on the TACACS port?  They should be able to show you the statement allowing traffic on port 49.

[msabin]

I've found the log-collection function on CPPM to be very helpful - specifically the fact that it will include a packet capture.

The collection gives you the incoming request (if it gets to CPPM) and the decision making process followed by the outgoing reply if you get the timing right.