Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1143 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RADIUS does work for ACC but not Gateway manager

ciscoman
Hi,

perhaps a stupid question:
RADIUS authentication does not work on the Gateway manager. I do have configured RADIUS on ACC and it does work either with the test feature and with the webadmin logon for the ACC itself.

Some log output:

acc aua[14067]: id="3006" severity="info" sys="System" sub="auth" name="Bind test request: radius"
acc aua[14067]: id="3006" severity="info" sys="System" sub="auth" name="Bind test successfull. Method: radius"
acc aua[14077]: id="3006" severity="info" sys="System" sub="auth" name="Spawned child for authentication test"
acc aua[14077]: id="3006" severity="info" sys="System" sub="auth" name="Authentication test request: m:radius, f:webadmin, u:MEINUSER, ip:"
acc aua[14077]: id="3006" severity="info" sys="System" sub="auth" name="Authentication test successfull"
acc aua[14089]: id="3006" severity="info" sys="System" sub="auth" name="Trying 10.10.10.10 (radius)"
acc aua[14089]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="20.2.2.2" user="MEINUSER" caller="acc" reason="DENIED"
acc aua[14094]: id="3004" severity="info" sys="System" sub="auth" name="Authentication successful" srcip="20.2.2.2" user="admin" caller="acc" engine="local"
acc aua[2864]: id="3004" severity="info" sys="System" sub="auth" name="Authentication successful" srcip="20.2.2.2" user="admin" caller="acc" engine="Cached"
acc aua[14305]: id="3006" severity="info" sys="System" sub="auth" name="Trying 10.10.10.10 (radius)"
acc aua[14305]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="20.2.2.2" user="MEINUSER" caller="acc" reason="DENIED"
acc aua[14332]: id="3006" severity="info" sys="System" sub="auth" name="Trying 10.10.10.10 (radius)"
acc aua[14332]: id="3004" severity="info" sys="System" sub="auth" name="Authentication successful" srcip="20.2.2.2" user="MEINUSER" caller="webadmin" engine="radius" 

Any tipps?


Thanks
ciscoman
ACC version 2.201


This thread was automatically locked due to age.
Parents
  • 0
    Hi,
    I activated these features on the ACC


    Automatic user creation
    [x]  Create users automatically
    Automatic user creation for facilities
    [x]  Gateway Manager
    [x]  WebAdmin

    but the result is still the same.

    Cheers
  • 0 in reply to ciscoman
    Hi

    Remote authentication (no matter if radius, edirectory, ...) should work with
    the Gateway Manager.

    Authentication in general seems to work on your setup. Please make sure you
    have entered the group 'Radius Users' or some custom radius group to the
    allowed users or allowed administrators list under "Management -> Gateway Manager"
    in your webadmin.

    Also make sure that the radius users come from a network that is allowed in
    the allowed netowrk field.
Reply
  • 0 in reply to ciscoman
    Hi

    Remote authentication (no matter if radius, edirectory, ...) should work with
    the Gateway Manager.

    Authentication in general seems to work on your setup. Please make sure you
    have entered the group 'Radius Users' or some custom radius group to the
    allowed users or allowed administrators list under "Management -> Gateway Manager"
    in your webadmin.

    Also make sure that the radius users come from a network that is allowed in
    the allowed netowrk field.
Children
  • 0 in reply to rleibl
    Hi
    Please make sure you have entered the group 'Radius Users' or some custom radius group to the allowed users or allowed administrators list under "Management -> Gateway Manager" in your webadmin.


    AAHH,
    shame on me. Stupid configuration issue.

    The RADIUS admin group was configured on the webadmin access section. But there is a need to add this group into the Gateway Manager section.

    However the configuration below seems not to be relevant.
    Automatic user creation
    [x] Create users automatically
    Automatic user creation for facilities
    [x] Gateway Manager
    [x] WebAdmin

    Thanks a lot
    ciscoman
Unfiltered HTML