topic Re: Reason: Authentication profile not found for the user in Next-Generation Firewall Discussions

Reason: Authentication profile not found for the user

P.Singh699426 — Wed, 24 Sep 2025 07:33:58 GMT

local admin created with authentication profile set to none but still PaloAlto is looking for authentication profile for this local user and not allowing to login, saying invalid username/password and here at FW end we are getting the log- Reason: Authentication profile not found for the user
PAN OS - 11.1.10-h1 - Is this is a bug in this version. Is anyone face such issue.

Re: Reason: Authentication profile not found for the user

PavelK — Wed, 24 Sep 2025 22:22:33 GMT

Hello @P.Singh699426

thanks for post!

Based on release notes there is no known issue corresponding to your post. Could you please run from CLI: tail follow yes mp-log authd.log while logging with that account to see it can provide more details?

Kind Regards

Pavel

Re: Reason: Authentication profile not found for the user

P.Singh699426 — Thu, 25 Sep 2025 06:18:44 GMT

Hello PavelK,

Thank you for your response. I’ve confirmed that the user is unable to log in via CLI as well. I’ve collected the logs from the CLI for your review. Based on the output, it appears that Palo Alto is attempting to apply an authentication profile to the local admin user — which should not be the case, except for the default admin user.

Please have a look at the logs below and advise further.

2025-09-24 17:44:30.021 +0530 debug: _get_auth_prof_detail(pan_auth_util.c:1140): admin user thru WebUI "test"
2025-09-24 17:44:30.021 +0530 Error: pan_auth_cache_get_admin_authprof(pan_auth_cache_adminusers.c:304): No default auth profile found for username test
2025-09-24 17:44:30.021 +0530 Error: _get_admin_authentication_profile_by_name(pan_auth_util.c:564): No admin auth prof found with the name test
2025-09-24 17:44:30.021 +0530 Error: _get_admin_authentication_profile(pan_auth_util.c:611): No auth prof/vsys is found for admin user "test"

Re: Reason: Authentication profile not found for the user

P.Singh699426 — Thu, 25 Sep 2025 06:27:42 GMT

Hello @PavelK

Please have a look at the logs below and advise further.

Re: Reason: Authentication profile not found for the user

P.Singh699426 — Fri, 26 Sep 2025 08:37:32 GMT

@PavelK and others,
As checked, I have observed that the local admin user created via the GUI is not visible in the CLI, while the local admin user created via the CLI is visible in the GUI but not properly reflected in the CLI. In other words, users created from either the GUI or CLI are not consistently replicated across both interfaces.

Additionally, we are unable to change the password of the default admin account. Although the firewall commit succeeds, the firewall continues to accept only the old password and rejects the new password as invalid.

Re: Reason: Authentication profile not found for the user

PavelK — Mon, 29 Sep 2025 00:25:33 GMT

Hello @P.Singh699426

thank you for reply.

I was going through documentation and based on what I could get out of this page: Local Authentication this looks like expected:

If possible, could you in authentication profile set type to: "Local Database"?

Kind Regards

Pavel

Re: Reason: Authentication profile not found for the user

P.Singh699426 — Mon, 29 Sep 2025 07:25:13 GMT

@PavelK
To resolved this we have upgrade the PAN-OS and after upgrade the same device were able to accept the new password. In that case it seems to have a new bug for this PAN-OS. Now we are able to change the default admin password and as well as create the new local admin with no authentication profile. Thank you for your time.

Re: Reason: Authentication profile not found for the user

PavelK — Mon, 29 Sep 2025 23:27:53 GMT

Hello @P.Singh699426

thank you for reply.

What PAN-OS version did you upgrade to? I went through release notes of PAN-OS 11.1.11 and unfortunately there is no addressed issue corresponding to symptoms you described.

Kind Regards

Pavel

Re: Reason: Authentication profile not found for the user

P.Singh699426 — Wed, 01 Oct 2025 13:22:05 GMT

@PavelK

The PAN-OS version 11.2.4-h7 has resolved the issue. As discussed with TAC, this appears to be a new finding affecting many users of the Palo-400 series.

Re: Reason: Authentication profile not found for the user

jturner_storm7 — Sun, 26 Apr 2026 18:30:38 GMT

I found this thread through a search w/ the same issue. However, we are on 11.2.4-h7 and the issue is STILL occurring. So, this version of code DOES NOT solve the issue. Can you provide your ticket # that I can reference a new support case?