Cisco ISE 2.0 - Guest account is not yet active

[Jozef Cmorej]

Hello,

we have an issue with guest users at one particular location who try to login to the guest portal and gets an error "authentication failed". ISE detailed report shows the failure reason "Account not active yet". The ISE software version is 2.0, patch 4. All nodes are running in Europe, a system time zone is Europe/Berlin. 

Several new local time zone are defined in Guest Access>Settings>Guest Locations and SSIDs then under Guest Access>Configure>Sponsor Groups added the time zone properties in each sponsor group

The issue is related only to the location in Turkey, other locations with different time zones are not affected. Apart from others, there are two guest location defined within the ISE deployment - Turkey ETC/GMT+3 and Europe/Istanbul.

When a local sponsor user in Turkey creates a guest user using a guest location either Turkey ETC/GMT+3 or Europe/Istanbul, then the guest user is active not immediately but after two hours, which is the time difference between Europe/Berlin and Europe/Istanbul.

I have found one bug that might be related to this issue https://bst.cloudapps.cisco.com/bugsearch/bug/CSCux20531/?referring_site=bugquickviewredir

Any help?

Thank you.

[marc.groenen]

We are currently also having the same issue's as you are describing and we are also thinking about creating a TAC case we are running ISE 2.0.1.130-Patch1 & 2

Did you ever solve this issue ?

[Jozef Cmorej]

It's a bug CSCvc43636, you have to change the timezone as the time is swapped. Below you can find a link to the bug description.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc43636