topic Re: Permission Denied when using GAIA OS Radius authentication with Okta in General Topics

Permission Denied when using GAIA OS Radius authentication with Okta

mguevara — Fri, 01 Sep 2023 15:43:35 GMT

Hi,

We are wanting to implement GAIA OS radius authentication via Okta, we are able to login, however we are receiving permission denied.

[Expert@vfcorpfw01:0]# id
uid=96(_nonlocl) gid=100(users) groups=100(users)
[Expert@vfcorpfw01:0]# cat /var/log/messages
cat: /var/log/messages: Permission denied
[Expert@vfcorpfw01:0]# cpconfig
/bin/cpconfig_start: line 12: /opt/CPshared/5.0/tmp/.CPprofile.sh: Permission denied

Do we need to set both of the following attributes in the radius side, or just one of them?

CP-Gaia-User-Role = adminRole

CP-Gaia-SuperUser-Access = 1

This is what we have in the okta radius side, I don't see a way to configure both of the attributes. Has anyone configured Radius auth for Gaia OS in okta? How did you configure it?

Re: Permission Denied when using GAIA OS Radius authentication with Okta

PhoneBoy — Fri, 01 Sep 2023 20:27:01 GMT

I suspect you’ll need both attributes but cannot confirm.

Re: Permission Denied when using GAIA OS Radius authentication with Okta

MSpA — Tue, 10 Sep 2024 11:49:44 GMT

Hi,

did you manage to give the right permissions? I am facing the same issue but it seems like Okta cannot pass the 2 attributes.

Any update on this?

Thank you!

Re: Permission Denied when using GAIA OS Radius authentication with Okta

Emerson_Oli — Tue, 08 Oct 2024 17:57:41 GMT

I have the same problem, I found the checkpoint link stating that it is necessary to have both parameters.

https://support.checkpoint.com/results/sk/sk120972

Re: Permission Denied when using GAIA OS Radius authentication with Okta

BCNCSECU — Fri, 30 Jan 2026 14:14:38 GMT

Hello: I am facing the same issue does anyone know how to get Okta to pass the 2 attributes

Re: Permission Denied when using GAIA OS Radius authentication with Okta

the_rock — Sat, 31 Jan 2026 19:57:47 GMT

That would make sense, yes.