MFA00598 RADIUS SERVER NOT AVAILABLE for Advanced Authentication Mainframe.

Products

• Advanced Authentication Mainframe
• ACF2
• ACF2 - z/OS

Issue/Introduction

Advanced Authentication Mainframe with ACF2. User receives error message MFA00598 RADIUS SERVER NOT AVAILABLE when user tries to sign on.

Environment

Product: Advanced Authentication Mainframe 

Resolution

The logs indicate there is a timeout:

2024-02-26 23:02:06,... MFA …. MFASystem-……….ERROR Mfa.RadiusAgent RadiusAgent.java : nnn - ThreadID:nn -- Receive timed out

2024-02-26 23:02:06,... MFA…MFASystem……WARN RADIUSDispatch… RADIUSDispatchActor.java : nnn - A failure occurred while communicating with the RADIUS server.

A timeout is an indication of misconfiguration or any situation when a server cannot be reached.

If all is configured properly, it is usually a Firewall issue.

In this case it was a Firewall issue on RADIUS server, regarding Firewall rules on the RADIUS server. The RADIUS protocol operates using UDP (not TCP/IP).