VIP Enterprise Gateway error: Unexpected error code [-1] after authentication, Can't get password attribute

Products

• VIP Service

Issue/Introduction

RADIUS Validations are failing with: 

ERROR "2023-1-04 00:00:11.506 GMT-0500"  10.10.11.1 CitrixVPN:1812 0 0 "text=VSValidationPacketizerProcess() -- Can't get password attribute" Thread-3852 VSValidationPacketizer.cpp
ERROR "2023-1-04 00:00:11.506 GMT-0500"  10.10.11.1 CitrixVPN:1812 0 0 "text=VSValidationServer._sendResponse()  -- Unexpected error code [-1] after authentication for [_48959]. Discarding the request." Thread-3852 VSValidationServer.cpp

Cause

The User Store Bind Information is invalid. 

Resolution

• Determine which User Store(s) the Validation Server is using under the Validation Server User Store Configuration setting. 
• Test the connection(s) of each user store (instruction here) and adjust the Bind Information values until the test is successful.
• Restart the Validation Server(s). 

Note: This error can also occur if the Validation Server is set to ULO mode but your application is sending username+OTP only (no LDAP password). The error occurs because the Validation Server expects the LDAP password attribute in the RADIUS request. If your application is not expecting the Validation Server to perform the 1st-factor LDAP username+LDAPpassword, create a new userID+Security code "UO" Validation Server.