cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
2269
Views
0
Helpful
2
Replies

Cisco ISE 2.0 - Guest account is not yet active

Jozef Cmorej
Level 1
Level 1

Hello,

we have an issue with guest users at one particular location who try to login to the guest portal and gets an error "authentication failed". ISE detailed report shows the failure reason "Account not active yet". The ISE software version is 2.0, patch 4. All nodes are running in Europe, a system time zone is Europe/Berlin. 

Several new local time zone are defined in Guest Access>Settings>Guest Locations and SSIDs then under Guest Access>Configure>Sponsor Groups added the time zone properties in each sponsor group

The issue is related only to the location in Turkey, other locations with different time zones are not affected. Apart from others, there are two guest location defined within the ISE deployment - Turkey ETC/GMT+3 and Europe/Istanbul.

When a local sponsor user in Turkey creates a guest user using a guest location either Turkey ETC/GMT+3 or Europe/Istanbul, then the guest user is active not immediately but after two hours, which is the time difference between Europe/Berlin and Europe/Istanbul.

I have found one bug that might be related to this issue https://bst.cloudapps.cisco.com/bugsearch/bug/CSCux20531/?referring_site=bugquickviewredir

Any help?

Thank you.

2 Replies 2

marc.groenen
Level 1
Level 1

We are currently also having the same issue's as you are describing and we are also thinking about creating a TAC case we are running ISE 2.0.1.130-Patch1 & 2

Did you ever solve this issue ?

It's a bug CSCvc43636, you have to change the timezone as the time is swapped. Below you can find a link to the bug description.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc43636

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: