authentication failed at 9800

[Leftz]

Hi we got log info from wlc 9800 for a user who has intermittent connection to wifi. Please see the below log info. there are some Authentication failed. Can we say it is caused by typing wrong password? if not, what is most possible reason for this? 

Thank you

2022/02/1 02:03:04.183292 {wncd_x_R0-0}{1}: [errmsg] [17774]: (note): %DOT1X-5-FAIL: Authentication failed for client (8567.eeee.111a) with reason (Timeout) on Interface capwap_9000001d AuditSessionID 1SDAFPOGIREJRKTA Username: abc@ciscohelp-group.com
2022/02/1 02:03:04.183419 {wncd_x_R0-0}{1}: [ewlc-infra-evq] [17774]: (ERR): SANET_AUTHC_FAILURE - Timeout username abc@ciscohelp-group.com, audit session id 1SDAFPOGIREJRKTA,

[balaji.bandi]

Where do you see this error on Controller or Radius ? (what radius servers ?)

[Leftz]

Thanks balaji for your reply. this log above is from wlc 9800. we use ise. it also shows some eap error

[marce1000]

      - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy06641

 M.

[addy_johny]

Hi,

I am in process of migration from Cisco 2500 to Cisco 9800-CL azure. We are using windows nps server with PEAP-EAP. All machines have certificate. There is GP policy pushed for wireless profile. Everything is working fine on Cisco 2500 but when users try to connect to Cisco 9800-CL broadcasted ssid. It throws same error as mentioned in this post.

[addy_johny]

Just to add I have checked running config there is no line as such below.

Workaround: ****REMOVE "key-wrap enable" command on "aaa group server radius" section.