Benutzer werden nach 10 Minuten aus dem WLAN abgemeldet

Question

Hallo, 
 wir setzen bei einem Kunden eine XG125w ein. Hier haben wir ein Hotspot-Netzwerk f&uuml;r die Mitarbeiter eingerichtet. Anmelden m&uuml;ssen sich die Benutzer &uuml;ber zwei Faktoren, zum einen &uuml;ber den Voucher und zum anderen mit Ihren AD-Anmeldedaten (Webclient auf Android und IOS Ger&auml;ten). 
 Wir haben nun das Problem, dass die Benutzer nach 10 Minuten automatisch wieder abgemeldet werden und sich mit Ihren Anmeldedaten neu anmelden m&uuml;ssen, egal ob Sie aktiv im WLAN surfen oder nicht. 
 
 Ich habe schon folgende Einstellungen ge&auml;ndert / getestet:

Ebenso habe ich die MAC-Bindung f&uuml;r die AD-Gruppen deaktiviert. 
 Hat jemand noch eine Idee woran das Problem liegen kann? 
 
 Gru&szlig; 
 
 Ole

sachingurung · Accepted Answer

I am not sure to suggest it, but I tested it on my local system and it yields the same results. You may still try it. 
 ERROR May 17 17:52:19 [4135582528]: adsauth_authenticate_user: '192.168.3.30:389': bind failed for User: 'sc\sachin' 
 ERROR May 17 17:52:19 [4135582528]: adsauth_authenticate_user: ADS Authentication Failed for User:'sachin' 
 ERROR May 17 17:54:40 [4135582528]: adsauth_authenticate_user: '192.168.3.30:389': bind failed for User: 'sc\sachin' 
 ERROR May 17 17:54:40 [4135582528]: adsauth_authenticate_user: ADS Authentication Failed for User:'sachin' 
 MESSAGE May 17 17:54:40 [4144195392]: (CA_authentication_result): User sachin authenticated (CA) on connection 0x8fd27f0 
 MESSAGE May 17 17:54:40 [4144195392]: (process_command): Received IP for user sachin on connection 0x8fd27f0: 1.1.1.1 
 MESSAGE May 17 17:55:10 [4144195392]: (CA_keep_alive): Sending PING to sachin on connection 0x8fd27f0 
 MESSAGE May 17 17:55:55 [4144195392]: (CA_keep_alive): Sending PING to sachin on connection 0x8fd27f0 
 ERROR May 17 17:56:34 [4144195392]: (process_command): Failed to read from SSL socket: len 0 5 conn 0x8fd27f0 fd 30 username sachin 
 MESSAGE May 17 17:56:34 [4144195392]: (CA_disconnect_user): Will disconnect user sachin conn 0x8fd27f0 
 Thanks,

Aditya Patel · Answer

Hi Ole , 
 Go to Shell Option 5 >3 
 Enter the commands 
 service access_server:debug -ds nosync 
 You should get 200 OK 
 To retrieve the live logs while reproducing the issue check access server logs 
 tail -f /log/access_server.log 
 or 
 cat log/access_server.log 
 After abstracting the logs disable the debug again 
 service access_server:debug -ds nosync 
 You should get 200 OK

sachingurung · Answer

After investigating the log file, here are my suggestions: 
 Here the Bind request to authenticate to the AD server fails, we might need to check the AD server configuration further.

ERROR Mar 13 09:19:09 [4131371840]: adsauth_bind: bind failed: Invalid credentials 
 ERROR Mar 13 09:19:09 [4131371840]: adsauth_authenticate_user: '1.1.1.1:389': bind failed for User: 'xyz' 
 ERROR Mar 13 09:19:09 [4131371840]: adsauth_authenticate_user: ADS Authentication Failed for User:'admin' 
 ERROR Mar 13 09:19:09 [4131371840]: adsauth_parse_error_msg: ad error no: 1326 
 ERROR Mar 13 09:19:09 [4144121664]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed

I see that you are using Client Authentication to authenticate the Users, the frequent disconnection is a result of a known issue which is targetted to be fixed in v17.2 Beta and the ETA could be in the 3rd Quarter of this year.

MESSAGE Apr 13 13:23:21 [4144129856]: (process_command): Client type is ANDROID 
 MESSAGE Apr 13 13:23:21 [4144129856]: (CA_authentication_result): User MS authenticated (CA) 
 MESSAGE Apr 13 13:23:21 [4144129856]: (process_command): Received IP for user MS: 1.1.1.2 
 MESSAGE Apr 13 14:14:22 [4144129856]: (process_command): PONG 68 from MS 
 ERROR Apr 13 14:14:27 [4144129856]: (process_command): Failed to read from SSL socket: len 0 5 
 MESSAGE Apr 13 14:14:27 [4144129856]: (CA_disconnect_user): Will disconnect user MS 
 ERROR Apr 13 21:05:08 [4140821312]: (_sqlite_db_handle_get_liveuserinfo): GET_LIVEUSER_INFO found no entries for IP 1.1.1.3 (sqrs 101) 
 ERROR Apr 13 21:05:08 [4144129856]: handle_get_liveuser: SQLITE_REQ_GETLIVEUSERINFO query failed

Thanks,