Permission Denied when using GAIA OS Radius authentication with Okta

[mguevara]

Hi, 

We are wanting to implement GAIA OS radius authentication via Okta,  we are able to login, however we are receiving permission denied. 

[Expert@vfcorpfw01:0]# id
uid=96(_nonlocl) gid=100(users) groups=100(users)
[Expert@vfcorpfw01:0]# cat /var/log/messages
cat: /var/log/messages: Permission denied
[Expert@vfcorpfw01:0]# cpconfig
/bin/cpconfig_start: line 12: /opt/CPshared/5.0/tmp/.CPprofile.sh: Permission denied

Do we need to set both of the following attributes in the radius side, or just one of them?

CP-Gaia-User-Role = adminRole

CP-Gaia-SuperUser-Access = 1

This is what we have in the okta radius side, I don't see a way to configure both of the attributes. Has anyone configured Radius auth for Gaia OS in okta? How did you configure it? 

[PhoneBoy]

I suspect you’ll need both attributes but cannot confirm.

[MSpA]

Hi,

did you manage to give the right permissions? I am facing the same issue but it seems like Okta cannot pass the 2 attributes.

Any update on this?

Thank you!

[Emerson_Oli]

I have the same problem, I found the checkpoint link stating that it is necessary to have both parameters.

https://support.checkpoint.com/results/sk/sk120972