Breaking Gaia RADIUS Change in R81.10 T79?

[B_P]

Anyone else use RADIUS to authenticate for GAIA and it broke after upgrading to Take 79? SmartConsole still works. Logs from RADIUS server says authorized, but Gaia says permission denied.

Tried fix related to PRJ-38144, PRHF-22814 just for kicks, but didn't help.

[the_rock]

I heard another customer had this issue and they rolled back to previous jumbo and worked fine again. Definitely seems like an issue with take 79.

[JozkoMrkvicka]

I am using Take 79 and RADIUS is working fine for me. But I didnt install any older Takes, only Take 79 on top of R81.10 (new deployment).

That said, are you able to uninstall any of previously installed Takes and install only Take 79 on R81.10 ? Maybe there is some conflict between different Takes...

[B_P]

Curious, are you using RADIUS to authenticate Gaia administrators?

[_Val_]

Please take it with TAC

[B_P]

Val, I post on here so I can avoid talking to TAC.

[_Val_]

Lol, I appreciate it, but sometimes we have to. If it is a bug, there is no other way.

[Ambar]

Hi,

Val is correct, the proper way is to open a ticket to TAC

As we’ve noticed your post we are looking into it and working on this in R&D

As a work around you can add a server or update one attribute and the RADIUS will return

Regardless a solution will be introduced in the coming jumbos

[Supporto_Checkp]

same issue on every cluster updated with Take 79...

 it's looks like this jumbo "forget" the radius key .

try to remove the radius config and add it again and it will works
🙂

[Nik_Bloemers]

I can confirm, this also happens on management too (seen it on MDS and a dedicated SmartEvent server). Deleting the aaa radius-servers from CLISH and then re-adding them fixes it.

[jgarcias]

I've had a similar problem after upgrading to latest jumbo on R81.10. I think the problem could be the PSK got corrupted somewhere.... after configuring it again in the GAIA the RADIUS auth started working again. Did you try that? Also try to remove and re-add the RADIUS servers again if the PSK workaround didn't work

[Ambar]

Hi, I would like to update that a Jumbo containing a fix will be released in the coming one

[dehaasm]

Strange we have the same issue on all gateways and SMS upgraded to r81.10 take 81 was this already fixed or do we need to manually reconfigure the radius on all manually?

[jgarcias]

Try only to configure the preshared key again and check if that fixes the issue. It worked fine for me... I didn't have to reconfigure all regarding RADIUS, only the PSK

[Tal_Paz-Fridman]

According to the JHF documentation it was fixed in take 82:

[Chris_Atkinson]

The following was resolved in T82:

After an upgrade, the RADIUS Server is unavailable and authentication fails.