https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182929#M68340 <P>Radius V1 will likely have password length constraints (16 characters or less), perhaps test to confirm that is the issue?</P> Thu, 01 Jun 2023 14:26:44 GMT Chris_Atkinson 2023-06-01T14:26:44Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182876#M68336 <P>Hi,</P><P>At two different customers I have the same issue.&nbsp; One is running R81, the other R81.10.</P><P>RADIUS is configured for HTTPS/SSH (GAIA level) and for SmartConsole.&nbsp; Same RADIUS server.&nbsp;</P><P>All RADIUS users can connect with SSH/HTTPS without any issues.</P><P>When opening SmartConsole,&nbsp; some users can connect.&nbsp;&nbsp; Others cannot.&nbsp;&nbsp; All the users are defined with the same RADIUS server.</P><P>Checkpoint logs show "Wrong password" even though the user is connecting with SSH with the same password</P><P>I did TCPDUMP.&nbsp; Couldn't find the firewall acting differently for different users.&nbsp;&nbsp;&nbsp; Access-Request and then Access-Reject for some of the RADIUS users to SmartConsole.&nbsp; Access-Accept for the the others.</P><P>Has anyone encountered this problem?</P><P>Thanks</P><P>micha</P><P>P.S. The only workaround we found is to change the SmartConsole user to a local Checkpoint Password user.</P> Thu, 01 Jun 2023 08:43:38 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182876#M68336 Micha 2023-06-01T08:43:38Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182903#M68337 <P>What method is used i.e. Radius 2.0 and PAP or CHAP?</P> Thu, 01 Jun 2023 11:50:49 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182903#M68337 Chris_Atkinson 2023-06-01T11:50:49Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182904#M68338 <P>I always found that while PAP is way less secure, it appears to always solve any Radius auth issues when it comes to Check Point.</P> <P>Andy</P> Thu, 01 Jun 2023 12:04:50 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182904#M68338 the_rock 2023-06-01T12:04:50Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182924#M68339 <P>PAP with RADIUS V1.</P><P>CHAP didn't work.</P> Thu, 01 Jun 2023 14:03:29 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182924#M68339 Micha 2023-06-01T14:03:29Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182929#M68340 <P>Radius V1 will likely have password length constraints (16 characters or less), perhaps test to confirm that is the issue?</P> Thu, 01 Jun 2023 14:26:44 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182929#M68340 Chris_Atkinson 2023-06-01T14:26:44Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182941#M68341 <P>I always had same experience.</P> Thu, 01 Jun 2023 14:52:05 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/182941#M68341 the_rock 2023-06-01T14:52:05Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/183147#M68342 <P><SPAN class=""><SPAN class="">sk13740 - </SPAN></SPAN>RADIUS authentication fails when using passwords longer than 16 characters</P><P><SPAN class="">Never thought of that. </SPAN></P><P><SPAN class="">Changed it to V2 and all users can now authenticate.&nbsp; Thanks!</SPAN></P> Sun, 04 Jun 2023 10:14:09 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/183147#M68342 Micha 2023-06-04T10:14:09Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/183148#M68343 <P>Check which RADIUS version you configured.&nbsp;&nbsp; Change to V2.</P> Sun, 04 Jun 2023 10:16:19 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/183148#M68343 Micha 2023-06-04T10:16:19Z https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/183151#M68344 <P>For sure, I learned that long time ago. Usually switching from v1 to v2 or other way around works.</P> <P>Cheers,</P> <P>Andy</P> Sun, 04 Jun 2023 13:50:37 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/RADIUS-to-SmartConsole-works-only-for-some-users/m-p/183151#M68344 the_rock 2023-06-04T13:50:37Z