Captive Portal login

[panos]

Hi,

Having an issue After trying to authenticate into the captive portal login page again same page comes.Portal login page is being presented again.

We checked everything but could not find what is missing.

Thanks.

[kprakash]

Can you restart the l3-service to see if it makes a difference?

>debug software restart l3-service

This service is responsible for the captive portal features.

BR,

Karthik RP

[Gregoux]

Are you using certificate authentication with your captiv portal with 5.05 panos version

because I have case open

[kprakash]

Looks like we dont have user identifications enabled on the zones:

Please refer to the below doc

https://live.paloaltonetworks.com/docs/DOC-2951

:BR,

Karthik RP

[panos]

it is enabled for all zones.Thanks for help.

I'll try the l3 service

[panos]

no not using certificate auth.

Thanks

[panos]

debug software restart l3-service

also did not resolve the issue

[Chatri]

Is the login attempt successful.

Can you verify in the authd.log whether the log in was successful?

Also, in the user mapping tab under device>>>user-identification...

Is there any networks specified under 'Include/exclude' networks? I have seen issues where the include and exclude networks causes the issue.

You could just try adding 0.0.0.0/0 in the include networks...just to see if that changes anything.

Regards.

[netslh]

Have you checked how you are authenticating?  I authenticate via Cisco ACS.  I noticed that when I started having the page not "pass through" to the internet page requested it was related to ACS not processing the request.  Sounds like it is not passing authenticating.  Check logs and see if you are authenticating.

[panos]

[netslh]

  Do you have the right user policy to allow that user in?   Looks like the user is not built in the database. Are you using local db instead of a server to authenticate such as AD or Radius?  I would check to see if user is built in the DB of the authenticating system.  If remote system, I would double check the server profile for correct settings to make sure Pan and the server are handshaking properly.

[panos]

Authentication profile uses Local Db with All users allowed.

That makes it strange.

[netslh]

You running multiple Vsys?  I also noticed you are running a 2050 have you tried to restart management plane?  What version of code are you running?

[panos]

1 vsys

5.0.5