topic Re: Global Protect Client not asking for passwort in General Topics

Global Protect Client not asking for passwort

Sven_Lieckfeldt — Fri, 20 Feb 2015 13:27:38 GMT

Hi there,

we're piloting the GP Client with a few people. Some of them are asked for credentials when connecting (expected behaviour) and some people are not asked for their credentials, but connected successful (not expected).

We definitely haven't turned on SSO. The Clients are all installed by the same software distribution task. Also, I can not see anything suspicous in the logs that leads me to the root cause of the SSO... And, as usual with such issues, I'm not able to reproduce it 😕

Have you experienced this in the past?

Thanks,

Sven

Re: Global Protect Client not asking for passwort

hyadavalli — Fri, 20 Feb 2015 14:39:48 GMT

Hello Sven,

One way to verify is check in the current user for the machine which got connected('Network->Global Protect->Gateways->Remote Users') without credentials and look for that IP address in system logs to see whether has any authentication passed onto portal?

Regards,

Hari Yadavalli

Re: Global Protect Client not asking for passwort

Sven_Lieckfeldt — Fri, 20 Feb 2015 14:45:54 GMT

Hi Hari,

I checked the logs again. But I don't see any difference from the globalprotectgateway-auth-succ Event for the users who are asked for credentials and those who are not. They all pass the same auth type: Profile.

Cheers,

Sven

Re: Global Protect Client not asking for passwort

mmmccorkle — Fri, 20 Feb 2015 17:03:20 GMT

Sven_Lieckfeldt,

and just to confirm... those specific machines were never logged into with credentials prior to this happening?

Thanks!

Please do not forget to mark and 'Helpful' or 'Correct' replies.

Re: Global Protect Client not asking for passwort

Sven_Lieckfeldt — Mon, 02 Mar 2015 10:05:38 GMT

Hi mmmccorkle,

sorry for my late replay - I was on vacation.

Yes, they connected for the very first time with this user and on that machine.

Thanks,

Sven

Re: Global Protect Client not asking for passwort

Satish — Mon, 02 Mar 2015 10:48:05 GMT

Hi Sven,

Please cross check the GP Portal - client configuration SSO and connect method.

Regards

Satish

Re: Global Protect Client not asking for passwort

Sven_Lieckfeldt — Tue, 03 Mar 2015 12:19:15 GMT

Hi Satish,

that is set to "on-demand" and "Use SSO" is _not_ checked.

Thanks,

Sven

Re: Global Protect Client not asking for passwort

jthakur — Tue, 03 Mar 2015 19:48:13 GMT

Sven_Lieckfeldt,

You may need to check PanGPS.log and authd.log to co-relate the authentication events.

1). Check PanGPS.log in global protect client installation path for auth events tried by user.

2). In PAN cli, execute below command for authentication event generated by user.

> less mp-log authd.log
Then type /user-name to search any log for the user and keep pressing 'n' until you don't see any relevant log.

Or you can search for user authentication event in authd.log using notepad++ after generating tech support file.

Without these logs it is difficult to say what happened.

Thanks