Reason: Authentication profile not found for the user

[P.Singh699426]

local admin created with authentication profile set to none but still PaloAlto is looking for authentication profile for this local user and not allowing to login, saying invalid username/password and here at FW end we are getting the log- Reason: Authentication profile not found for the user
PAN OS - 11.1.10-h1 - Is this is a bug in this version. Is anyone face such issue.

[PavelK]

Hello @P.Singh699426

thanks for post!

Based on release notes there is no known issue corresponding to your post. Could you please run from CLI: tail follow yes mp-log authd.log while logging with that account to see it can provide more details?

Kind Regards

Pavel

[P.Singh699426]

Hello PavelK,

Thank you for your response. I’ve confirmed that the user is unable to log in via CLI as well. I’ve collected the logs from the CLI for your review. Based on the output, it appears that Palo Alto is attempting to apply an authentication profile to the local admin user — which should not be the case, except for the default admin user.

Please have a look at the logs below and advise further.

​2025-09-24 17:44:30.021 +0530 debug: _get_auth_prof_detail(pan_auth_util.c:1140): admin user thru WebUI "test"
2025-09-24 17:44:30.021 +0530 Error:  pan_auth_cache_get_admin_authprof(pan_auth_cache_adminusers.c:304): No default auth profile found for username test
2025-09-24 17:44:30.021 +0530 Error:  _get_admin_authentication_profile_by_name(pan_auth_util.c:564): No admin auth prof found with the name test
2025-09-24 17:44:30.021 +0530 Error:  _get_admin_authentication_profile(pan_auth_util.c:611): No auth prof/vsys is found for admin user "test"

[P.Singh699426]

Hello @PavelK 

Please have a look at the logs below and advise further.

​2025-09-24 17:44:30.021 +0530 debug: _get_auth_prof_detail(pan_auth_util.c:1140): admin user thru WebUI "test"
2025-09-24 17:44:30.021 +0530 Error:  pan_auth_cache_get_admin_authprof(pan_auth_cache_adminusers.c:304): No default auth profile found for username test
2025-09-24 17:44:30.021 +0530 Error:  _get_admin_authentication_profile_by_name(pan_auth_util.c:564): No admin auth prof found with the name test
2025-09-24 17:44:30.021 +0530 Error:  _get_admin_authentication_profile(pan_auth_util.c:611): No auth prof/vsys is found for admin user "test"

[P.Singh699426]

@PavelK and others,
As checked, I have observed that the local admin user created via the GUI is not visible in the CLI, while the local admin user created via the CLI is visible in the GUI but not properly reflected in the CLI. In other words, users created from either the GUI or CLI are not consistently replicated across both interfaces.

Additionally, we are unable to change the password of the default admin account. Although the firewall commit succeeds, the firewall continues to accept only the old password and rejects the new password as invalid.

[PavelK]

Hello @P.Singh699426

thank you for reply.

I was going through documentation and based on what I could get out of this page: Local Authentication this looks like expected:

If possible, could you in authentication profile set type to: "Local Database"?

Kind Regards

Pavel

[P.Singh699426 · Accepted solution]

@PavelK 
To resolved this we have upgrade the PAN-OS and after upgrade the same device were able to accept the new password. In that case it seems to have a new bug for this PAN-OS. Now we are able to change the default admin password and as well as create the new local admin with no authentication profile. Thank you for your time.

[PavelK]

Hello @P.Singh699426

thank you for reply.

What PAN-OS version did you upgrade to? I went through release notes of PAN-OS 11.1.11 and unfortunately there is no addressed issue corresponding to symptoms you described.

Kind Regards

Pavel