https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139463#M27140 <P>Just going by my pure logic here, first thing I would personally check is to make sure that permissions and settings for non working user are same as working ones. Assuming they all have same access, I cant really think of any other reason why this would fail. Is that the only message you see in the logs? If you do say tcpdump of fw monitor for that user's IP address or zdebug on just their usernames, what do you see?</P> <P>Andy</P> Tue, 25 Jan 2022 20:31:00 GMT the_rock 2022-01-25T20:31:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139445#M27139 <P>i have integrated my R80.40 smartoconsole and GWs with CIsco ISE via RADIUS protocol.. facing a weird issue for a single user who is not able to loign to smartconsole citing an error authentication failed.. however same password works for CLI login.</P><P>There are other users also configured on the same device but none of them have any issue.. any help is appreicated</P> Tue, 25 Jan 2022 17:30:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139445#M27139 LostBoY 2022-01-25T17:30:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139463#M27140 <P>Just going by my pure logic here, first thing I would personally check is to make sure that permissions and settings for non working user are same as working ones. Assuming they all have same access, I cant really think of any other reason why this would fail. Is that the only message you see in the logs? If you do say tcpdump of fw monitor for that user's IP address or zdebug on just their usernames, what do you see?</P> <P>Andy</P> Tue, 25 Jan 2022 20:31:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139463#M27140 the_rock 2022-01-25T20:31:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139477#M27141 <P>Check the Permission Profile assigned to the user in question.</P> <P>Also, when you are referring to CLI, are you referring to a Management CLI or CLISH?</P> <P>&nbsp;</P> Wed, 26 Jan 2022 00:18:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139477#M27141 Vladimir 2022-01-26T00:18:53Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139496#M27142 <P>On the user record is their any time or expiry constraint set?</P> Wed, 26 Jan 2022 02:35:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139496#M27142 Chris_Atkinson 2022-01-26T02:35:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139517#M27143 <P>Thank you all for the replies.. it turned out RADIUS version 1 was configured for ISE object in Smartconsole which was limiting the password character to 16.. i changed it to v2 and now its working fine</P><P>&nbsp;</P><P>it was a mere coincidence that the one user which was affected was using a 17 letter password XD</P> Wed, 26 Jan 2022 05:23:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Login-failure-for-a-RADIUS-User/m-p/139517#M27143 LostBoY 2022-01-26T05:23:58Z