Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 2 answers
  • Subscribers 27 subscribers
  • Views 9042 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Benutzer werden nach 10 Minuten aus dem WLAN abgemeldet

Ole Heydt

Hallo,

wir setzen bei einem Kunden eine XG125w ein. Hier haben wir ein Hotspot-Netzwerk für die Mitarbeiter eingerichtet. Anmelden müssen sich die Benutzer über zwei Faktoren, zum einen über den Voucher und zum anderen mit Ihren AD-Anmeldedaten (Webclient auf Android und IOS Geräten).

Wir haben nun das Problem, dass die Benutzer nach 10 Minuten automatisch wieder abgemeldet werden und sich mit Ihren Anmeldedaten neu anmelden müssen, egal ob Sie aktiv im WLAN surfen oder nicht.

 

Ich habe schon folgende Einstellungen geändert / getestet:

 

 

Ebenso habe ich die MAC-Bindung für die AD-Gruppen deaktiviert.

Hat jemand noch eine Idee woran das Problem liegen kann?

 

Gruß

 

Ole



This thread was automatically locked due to age.
Parents
  • 0

    After investigating the log file, here are my suggestions:

    Here the Bind request to authenticate to the AD server fails, we might need to check the AD server configuration further.

     

    ERROR     Mar 13 09:19:09 [4131371840]: adsauth_bind: bind failed: Invalid credentials 

    ERROR     Mar 13 09:19:09 [4131371840]: adsauth_authenticate_user: '1.1.1.1:389': bind failed for User: 'xyz'

    ERROR     Mar 13 09:19:09 [4131371840]: adsauth_authenticate_user: ADS Authentication Failed for User:'admin'

    ERROR     Mar 13 09:19:09 [4131371840]: adsauth_parse_error_msg: ad error no: 1326

    ERROR     Mar 13 09:19:09 [4144121664]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed

     

    I see that you are using Client Authentication to authenticate the Users, the frequent disconnection is a result of a known issue which is targetted to be fixed in v17.2 Beta and the ETA could be in the 3rd Quarter of this year.

     

    MESSAGE   Apr 13 13:23:21 [4144129856]: (process_command): Client type is ANDROID

    MESSAGE   Apr 13 13:23:21 [4144129856]: (CA_authentication_result): User MS authenticated (CA)

    MESSAGE   Apr 13 13:23:21 [4144129856]: (process_command): Received IP for user MS: 1.1.1.2

    MESSAGE   Apr 13 14:14:22 [4144129856]: (process_command): PONG 68 from MS

    ERROR     Apr 13 14:14:27 [4144129856]: (process_command): Failed to read from SSL socket: len 0 5

    MESSAGE   Apr 13 14:14:27 [4144129856]: (CA_disconnect_user): Will disconnect user MS

    ERROR     Apr 13 21:05:08 [4140821312]: (_sqlite_db_handle_get_liveuserinfo): GET_LIVEUSER_INFO found no entries for IP 1.1.1.3 (sqrs 101)

    ERROR     Apr 13 21:05:08 [4144129856]: handle_get_liveuser: SQLITE_REQ_GETLIVEUSERINFO query failed

     

    Thanks,

  • 0 in reply to sachingurung

    Hi,

    first of all thank you for your time and effort!

    To suggestion one: Yes we had problems with our ad-server. But these problemes came from the network between the xg and our server. They have been resolved.

     

    To suggestion / information two: OK, so do you think using the Sophos Network Agent would be a possible solution for bypassing the known bug in the meantime?

     

    Grettings,

     

    Ole

Reply
  • 0 in reply to sachingurung

    Hi,

    first of all thank you for your time and effort!

    To suggestion one: Yes we had problems with our ad-server. But these problemes came from the network between the xg and our server. They have been resolved.

     

    To suggestion / information two: OK, so do you think using the Sophos Network Agent would be a possible solution for bypassing the known bug in the meantime?

     

    Grettings,

     

    Ole

Children
  • +1 in reply to Ole Heydt

    I am not sure to suggest it, but I tested it on my local system and it yields the same results. You may still try it.

    ERROR     May 17 17:52:19 [4135582528]: adsauth_authenticate_user: '192.168.3.30:389': bind failed for User: 'sc\sachin'

    ERROR     May 17 17:52:19 [4135582528]: adsauth_authenticate_user: ADS Authentication Failed for User:'sachin'

    ERROR     May 17 17:54:40 [4135582528]: adsauth_authenticate_user: '192.168.3.30:389': bind failed for User: 'sc\sachin'

    ERROR     May 17 17:54:40 [4135582528]: adsauth_authenticate_user: ADS Authentication Failed for User:'sachin'

    MESSAGE   May 17 17:54:40 [4144195392]: (CA_authentication_result): User sachin authenticated (CA) on connection 0x8fd27f0

    MESSAGE   May 17 17:54:40 [4144195392]: (process_command): Received IP for user sachin on connection 0x8fd27f0: 1.1.1.1

    MESSAGE   May 17 17:55:10 [4144195392]: (CA_keep_alive): Sending PING to sachin on connection 0x8fd27f0

    MESSAGE   May 17 17:55:55 [4144195392]: (CA_keep_alive): Sending PING to sachin on connection 0x8fd27f0

    ERROR     May 17 17:56:34 [4144195392]: (process_command): Failed to read from SSL socket: len 0 5 conn 0x8fd27f0 fd 30 username sachin

    MESSAGE   May 17 17:56:34 [4144195392]: (CA_disconnect_user): Will disconnect user sachin conn 0x8fd27f0

    Thanks,

  • 0 in reply to sachingurung

    Okey,

    then I'll have to wait for the next update...

     

    Regards,

    Ole