topic Re: Linux GlobalProtect Client sends bad passcode format to RSA SecureID Radius in General Topics

Linux GlobalProtect Client sends bad passcode format to RSA SecureID Radius

Farzana — Wed, 12 Sep 2018 01:34:59 GMT

Hello,

We've been using GlobalProtect on Windows and Mac for a long time now in conjunction with our RSA SecureID MFA appliances.

We've recently started trialling the GlobalProtect client on Linux, however no users are able to authenticate against the RSA SecureID appliance via the Linux client due to a "Passcode format error". I have tried multiple users on the Linux client with the same result.

I can however, jump back on my windows device and using the exact same credentials as I tried on Linux, connect successfully using the Windows GlobalProtect client. Therefore, it seems to be the way the Linux client is sending the RSA SecureID details back to the Palo Alto's to pass on the the Radius server.

Any help would be appreciated.

Re: Linux GlobalProtect Client sends bad passcode format to RSA SecureID Radius

BPry — Wed, 12 Sep 2018 01:56:23 GMT

@Farzana,

I actually think this is a known thing. I know that when I first starting testing the LInux client I ran into this issue with the 4.1.2 agent; and I don't see anything in the current release notes that it was ever addressed.

Re: Linux GlobalProtect Client sends bad passcode format to RSA SecureID Radius

FarzanaMustafa — Thu, 25 Oct 2018 00:39:50 GMT

Thanks @BPry.

GP version 4.1.5 has fixed the issue.