HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

Table 102 Common Authentication Failure Problems (continued)
TroubleshootingProblem
Solution 1. Ensure that the shared secret configured on the RADIUS client matches
the one specified in the Access Devices screen of the Server Manager.
2. Ensure that the password supplied by the user is correct.
session_allowed: Access rejected. Active sessions for user is at maximum
configured (Simultaneous-Use) limit '<limit>
Log MessageUnable to
authenticate
The HP-UX AAA Server received an Access-Request from a user whose
number of active sessions equal the configured simultaneous session limit.
Cause
Or,
The NAS went offline abruptly and resulted in a stale session in the HP-UX
AAA Server, for the affected user.
Advise the user to terminate the existing session before attempting to start
a new one.
Solution
If the user does not have an active open session, use the Session screen
of the Server Manager to delete the stale session. For more information,
see Chapter 14 (page 120).
Or,
Increase the simultaneous session limit for the user. For more information
on configuring simultaneous sessions, see “Limiting Simultaneous Sessions”
(page 122).
aaa_realm: Request denied. Unknown realm '<realm name>' for user
'<user name>'. Verify realm configuration through Server Manager or
Log MessageUnable to
authenticate
in files '<authfile>' for the realm and '<EAP.authfile>' for the realm
or default realm entry
The HP-UX AAA Server is not configured to service requests from the realm.Cause
Solution 1. Ensure that the client is configured to send requests to the correct HP-UX
AAA Server.
2. If the client configuration is correct, configure the realm in the HP-UX
AAA Server as described in Chapter 8 (page 73).
parse_password: Authentication failed.Incomplete or no profile found for
user '<user name>' in realm '<realm name>'. Verify that a complete
user profile exists for the user
Log MessageUnable to
authenticate
The request contains an incorrect user name.Cause
Or
The user is not a part of the realm
Solution 1. Verify that the user belongs to the realm.
2. If the user belongs to the realm, configure the user profile in the data
store for the realm.
If the datastore is the local file, use the Users screen in the Server
Manager to configure the user.
For more information on configuring local users, see Chapter 10
(page 89).
3. Verify that the correct realm and Otp-ActionIdare configured in the
request-ingress.grp file.
If you have modified the configuration, save the configuration and restart
the HP-UX AAA Server.
compare_password_hash: Hash mechanism '<incorrect>' is not
supported
Log Message
Troubleshooting the HP-UX AAA Server 365