topic Re: Locked user list in General Topics

Locked user list

k.dimitrovski — Wed, 09 May 2012 15:37:32 GMT

I've been getting this error for a user on our Captive portal:

User 'neoguest' failed authentication. Reason: User is in locked users list From: 172.16.10.100.

I've searched how to unlock the user but I haven't found any info on that.

Can anyone send some info on how to unlock this user because I tried deleting and recreating the same user but the error is still present.

Best regards,

Konstantin

Re: Locked user list

zarina — Wed, 09 May 2012 17:36:51 GMT

Under Device->Authentication profile, the last column will list locked users. Please select the user 'neoguest' and unlock him/her.

Re: Locked user list

JeanLuc974 — Sat, 20 Apr 2013 09:25:55 GMT

Hello,

I have a locked user I am unable to unlock hil. I can see him in WebUI but when I click on his name nothing happens.

What can I try else ?

regards

Jean-Luc

Re: Locked user list

sspringer — Sat, 20 Apr 2013 16:17:14 GMT

Hi,

What version of PanOS are you running?

There have been a few issues removing users from locked list. The fixes are described in the release notes (bug 43665, 44805, 47387) with the most recent is fix in 4.1.12/5.0.3.

Do you have the same issue with all browsers(IE/Chrome/Firefox)?

If the user is locked out of GP Gateway they can be cleared from CLI:

> request global-protect-gateway unlock

- Stefan

Re: Locked user list

JeanLuc974 — Sat, 20 Apr 2013 16:24:53 GMT

Hello,

I was using 5.0.0 and had the problem with IE and Firefox.

I even get a debug capture which only says

<response status="success"><result><response status="error"><result>User could not be unlocked.

Please check the authentication profile and/or the authentication sequence for this user.</result></response></result></response>

I have done 2 things, upgraded to the last version and rename a local group with the same name of the NetBIOS name of a Windows domain I was authenticating from

the problem disappear

Sorry for disturbing

Have a nice day

Jean-Luc