Newly added RSA management users on Web Isolation Cloud Management Portal were not able to login

Products

• Web Isolation Cloud

Issue/Introduction

Despite adding management users into the management portal new management users were still not able to login.

Management Audit Logs shows the following error.

Error 1: "Failed login attempt by non-existent username <user.name>. Remote address <remote IP>"
Error 2: - "User <user.name> failed to login since no roles are assigned to it."

Checking RSA audit logs shows that RSA authentication were successfully.

Environment

Release : 1

Resolution

Radius server were not returning username attribute in "Access-accepted" packet. Issue is resolve once that is fixed on the RSA radius server side. Below shows PCAP differences we see between working and non-working connection. Notice that the non-working PCAP does not return the username attribute hence causing login to fail.