What is the meaning of StatusCode: 24585, StatusMessage: Authentication Failed.

Products

• VIP Service

Issue/Introduction

The following INFO-level log entry is seen in the VIP RADIUS validation server logs

INFO "2019-07-10 10:41:40.877 GMT-0600"  0.0.0.0 SRAS:1814 0 0 "text=After Services Authenticate call for user [johnsmith]. StatusCode: 24585, StatusMessage: Authentication Failed." Thread-7552 VSAuthOTPStandardControllerImpl.cpp

Environment

Radius Validation Server running ULO mode with Access-Challenge enabled

Cause

This end-user is not entering their VIP security code along with their password during 2FA login, and is entering the code when being challenged, or on the initial login push enabled credential and is accepting the push as it is received on the mobile phone.

Resolution

This is a false-positive error seen in the logs when the user's LDAP password is alpha-numeric and VIP attempts to validate the digits as the OTP. (please see: Delegation and authentication workflow in VIP Enterprise Gateway version 9.8 and later). This is normal behavior with zero negative impact to the user's VIP account:

INFO "2019-07-10 10:41:40.877 GMT-0600"  0.0.0.0 SRAS:1814 0 0 "text=After Services Authenticate call for user [johnsmith]. StatusCode: 24585, StatusMessage: Authentication Failed." Thread-7552 VSAuthOTPStandardControllerImpl.cpp
INFO "2019-07-10 10:41:41.846 GMT-0600"  0.0.0.0 SRAS:1814 0 0 "text=Verified against User Store No:- 1, authentication result:- 0" Thread-7552 tokenbinding.cpp
INFO "2019-07-10 10:41:42.096 GMT-0600"  0.0.0.0 SRAS:1814 0 0 "text=VSAuthOTPFirstFactorLDAPImpl.authenticateExt() -- User successfully validated against user-store no. = 1" Thread-7552 VSAuthOTPFirstFactorImpl.cuserid
INFO "2019-07-10 10:41:42.549 GMT-0600"  0.0.0.0 SRAS:1814 0 0 "text=PUSH request sent for user johnsmith." Thread-7552 VSAuthOTPStandardControllerImpl.cpp
INFO "2019-07-10 10:41:47.518 GMT-0600"  0.0.0.0 SRAS:1814 0 0 "text=Authentication Success for user [johnsmith]. StatusCode: 28672, StatusMessage: Mobile push request approved by user" Thread-7164 VSAuthOTPStandardControllerImpl.cpp
AUDIT "2019-07-10 10:41:47.518 GMT-0600"  10.249.145.130 SRAS:1814 0 0 "text=Access GRANTED" Thread-7164 VSValidationEngine.c

Additional Information

Delegation and authentication workflow in VIP Enterprise Gateway version 9.8 and later