topic Re: Captive Portal login in General Topics

Captive Portal login

Retired Member — Wed, 24 Jul 2013 15:59:59 GMT

Hi,

Having an issue After trying to authenticate into the captive portal login page again same page comes.Portal login page is being presented again.

We checked everything but could not find what is missing.

Thanks.

Re: Captive Portal login

kprakash — Wed, 24 Jul 2013 16:02:12 GMT

Can you restart the l3-service to see if it makes a difference?

>debug software restart l3-service

This service is responsible for the captive portal features.

BR,

Karthik RP

Re: Captive Portal login

Gregoux — Wed, 24 Jul 2013 16:11:43 GMT

Are you using certificate authentication with your captiv portal with 5.05 panos version

because I have case open

Re: Captive Portal login

kprakash — Wed, 24 Jul 2013 18:48:36 GMT

Looks like we dont have user identifications enabled on the zones:

Please refer to the below doc

https://live.paloaltonetworks.com/docs/DOC-2951

:BR,

Karthik RP

Re: Captive Portal login

Retired Member — Wed, 24 Jul 2013 20:42:49 GMT

it is enabled for all zones.Thanks for help.

I'll try the l3 service

Re: Captive Portal login

Retired Member — Wed, 24 Jul 2013 20:43:28 GMT

no not using certificate auth.

Thanks

Re: Captive Portal login

Retired Member — Thu, 25 Jul 2013 06:11:06 GMT

debug software restart l3-service

also did not resolve the issue

Re: Captive Portal login

Chatri — Thu, 25 Jul 2013 10:49:27 GMT

Is the login attempt successful.

Can you verify in the authd.log whether the log in was successful?

Also, in the user mapping tab under device>>>user-identification...

Is there any networks specified under 'Include/exclude' networks? I have seen issues where the include and exclude networks causes the issue.

You could just try adding 0.0.0.0/0 in the include networks...just to see if that changes anything.

Regards.

Re: Captive Portal login

netslh — Thu, 25 Jul 2013 19:03:46 GMT

Have you checked how you are authenticating? I authenticate via Cisco ACS. I noticed that when I started having the page not "pass through" to the internet page requested it was related to ACS not processing the request. Sounds like it is not passing authenticating. Check logs and see if you are authenticating.

Re: Captive Portal login

Retired Member — Fri, 26 Jul 2013 11:55:30 GMT

Re: Captive Portal login

netslh — Fri, 26 Jul 2013 12:43:34 GMT

Do you have the right user policy to allow that user in? Looks like the user is not built in the database. Are you using local db instead of a server to authenticate such as AD or Radius? I would check to see if user is built in the DB of the authenticating system. If remote system, I would double check the server profile for correct settings to make sure Pan and the server are handshaking properly.

Re: Captive Portal login

Retired Member — Fri, 26 Jul 2013 13:42:36 GMT

Authentication profile uses Local Db with All users allowed.

That makes it strange.

Re: Captive Portal login

netslh — Fri, 26 Jul 2013 13:48:55 GMT

You running multiple Vsys? I also noticed you are running a 2050 have you tried to restart management plane? What version of code are you running?

Re: Captive Portal login

Retired Member — Fri, 26 Jul 2013 13:55:51 GMT

1 vsys

5.0.5