ISE expiring guest accounts early

[marco_bartulihe]

Hello,

I would like to know if there is a way to know the reason why a guest was expired.

I created some guest accounts with different expiration dates, but some are expired earlier than expected.

Regards,

Marco Bartulihe

[Venkatesh Attuluri]

When an active or suspended account reaches the end of its account duration (which you defined when you created the account), the account expires.Guest reached the maximum number of login attempts as defined by your system administrator. Expired—When an account has expired following the expiration of the valid time defined by the time profile for that account. What is the ISE version you are using ?

[marco_bartulihe]

I am using ISE version 1.2.1.198.

For some accounts, even if I configure the account duration for 1 year, for example, after a random amount of time, the account gets expired.

I changed to 99 the max number login attempts, but the problem continues.

[Angus Bishop]

Hi Marco ,

Were you able to get a solution for this .

I am also facing the same issue as randomly users are getting Expired .

I am giving an expiry time of 90 days  but random users get expired  . 

and the authentication logs says  the time profile restriction whereas i am not doing any time restriction in the profile 

Please let me know if any one has got the solution 

Regards

Agnus 

[mohanak]

Guest authentication fails (restricted) with time profile FromFirstLogin

CSCuq83249

Description

Symptom:
Guest user fail authentication with error
Event 5418 Guest Authentication Failed
Failure Reason 86019 Guest User restricted

It happens if the user log first after the timeProfile validity, even if it is a FromFirstLogin profile.
That means, if the guest user is assigned a time profile that is valid for 24Hours after login, the user won't be able to login after 24Hours.

Conditions:
Guest uses a timeProfile fromFirstLogin and didn't logged in before timeProfile validity time

Workaround:
Reset Guest account validity from Sponsor portal fixes the issue temporarily (the same situation will occur if guest do not login).

Last Modified:

Dec 23,2014

Status:

Fixed

Severity:

2 Severe

Product:

Cisco Identity Services Engine (ISE) 3300 Series Appliances

Rate the helpful posts........

Known Affected Releases:

(1)

1.2(1.198)

[Angus Bishop]

hi ,

In my case the user is provided with 90 days access but within few  days  randomly users are getting expired . The users are not exceeding the mentioned days . 

Even if ISE checks  From First login / From creation the users are getting expired before the validity . 

Regards

Agnus