PANOS Release 6.1.3 Required to login twice to get access

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

PANOS Release 6.1.3 Required to login twice to get access

L4 Transporter

Hello,

I've a cluster of PA500 running 6.1.3.

When I try to login to the system (with the GUI), the login always fails and I'm redirected back to the login page.

After login again, it works fine...

Any idea ?

Regards,

HA

9 REPLIES 9

L3 Networker

Hi license@simac.lu

Did you check authd logs to see if the authentication is successful during the first attempt?

If you seeing nothing unusual, you might want to check if disk-space is almost full.

>show system disk-space

Thank You.

Hello,

Filesystem            Size  Used Avail Use% Mounted on

/dev/sda3             3.8G  1.6G  2.1G  43% /

/dev/sda5             7.6G  3.5G  3.8G  49% /opt/pancfg

/dev/sda6             3.8G  1.6G  2.0G  45% /opt/panrepo

tmpfs                 459M   69M  390M  16% /dev/shm

/dev/sda8             125G  8.5G  110G   8% /opt/panlogs

So, the issue is not coming from the disk space...

Regards,

HA

What does the system log show for the first failed login attempt?

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

L2 Linker

Is the administrator account utilizing local authentication or an external source (LDAP, RADIUS, Kerberos)?

Do you experience the same issue when connecting via SSH or just the WEBUI?

James Costello
Global Solutions Architect, NGFW
Palo Alto Networks

L4 Transporter

Hello,

Issue only with the Web GUI, SSH is OK.

In the log I can see two login attempt.

User xxx logged in via Web from y.y.y.y using https     04/29 15:13:35

User 'xxx' authenticated. From: y.y.y.y.                                             04/29 15:13:35

User xxx logged in via Web from y.y.y.y using https     04/29 15:11:44

User 'xxx' authenticated. From: y.y.y.y.                                              04/29 15:11:44


Regards,


HA

Does this occur with different browsers or just one in particular?

When you login are there multiple logins showing in the Logged in Admins widget on the Dashboard of the firewall?

The output above indicates that authentication was successful. What is the output from the authd.log when the two logins occur

from the CLI - tail lines 100 mp-log authd.log

James Costello
Global Solutions Architect, NGFW
Palo Alto Networks

L4 Transporter

Hello,

I find the problem. Browser bookmark !

The bookmark was pointing to https://x.x.x.x/esp/login.esp

After removing the /esp/login.esp, no issue...

Thanks all for your help.

Regards,

HA

Good to hear you found the answer.

Have a good day

James Costello
Global Solutions Architect, NGFW
Palo Alto Networks

Thanks for the update.  That is a strange issue.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
  • 3593 Views
  • 9 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!