HP-UX AAA Server A.08.00.01 Administrator's Guide

Table 30-4 External Service Failure Problems (continued)
TroubleshootingProblem
Authentication: 205/0 '<user name>' via <hostname/IP
address> from <hostname/IP address> port <port
Log MessageUnable to connect
to the DHCP server
no> Outbound (8 retries) - FAILED DHCP server not
responding -- total 24, holding 0
The DHCP server is busy or unavailable.Cause
Verify if the DHCP server is running and can service IP
address requests.
Solution
Or,
Specify an alternate DHCP server.
mschap2Authenticate: user ‘<user name>’ has
unknown hash ‘crypt’
Log MessageTwo-factor
authentication
using MS-CHAP v2
mschap2Authenticate: user ‘<user name>’ has
fails when the
unknown hash ‘sha’ or Mschap2Authenticate:
encrypted user
user
password is stored
‘<user name>’ has unknown hash ‘SHA’
in LDAP and the
token information
mschap2Authenticate: user ‘<user name>’ has
is stored in SQL
database.
unknown hash ‘ssha’ or Mschap2Authenticate:
user
‘<user name>’ has unknown hash ‘SSHA’
mschap2Authenticate: user ‘<user name>’ has
unknown hash ‘md5’
Two-factor authentication using MS-CHAP v2 supports only
clear text user password stored in LDAP.
Cause
If the user encrypted password is stored in the SQL Database,
SQL Access conversion function is required to convert the
Solution
respective encrypted password to clear text user password.
MS-CHAP v2 supports only clear text user password stored
in LDAP.
Identifying Unrecorded External Datastore Failures
If your AAA environment uses one or more external datastores, a failure in a datastore
can cause the HP-UX AAA Server to be unresponsive, but not record an error to the
logfile.
To determine if an unrecorded external datastore failure is causing the problem,
complete the following steps:
1. Examine the Access-Request for the User-Name attribute value to determine the
realm.
2. Select the realm from the Local Realms screen of the Server Manager,
Troubleshooting the HP-UX AAA Server 483