LDAP users getting disconnected from the wireless

[sobin peter]

Hi I have cisco WLC 8540 integrated with LDAP for the user authentication. The authentication is success but the AD users gets disconnecting sometimes and need to login again with the credentials. 

Can someone suggest the troubleshoot to keep the user connected until the password change.

Sobin.

[Flavio Miranda]

Hi

 Take a look here. Look for the LDAP section:

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112064-wlc-commands.html#ldap

-If I helped you somehow, please, rate it as useful.-

[Ric Beeching]

You can increase the session timeouts significantly which will leave the users connected. At the moment I imagine they have to re-auth every 1800 seconds/30 minutes and that is causing headaches? Alternatively, switch to AD auth to see if that improves performance?

Ric

[sobin peter]

Thanks Ric..

I have disabled the session time out but still the issue is there. 

Is it mandatory to enable the session time out or can it be disable therein the session will not expire?

[Ric Beeching]

If you disable session timeout it will go to 24 hours (86400 seconds) but still require a re-auth at that point. You will also want to increase your idle timeout if you wish for clients to try and avoid constant re-auth. The max for this is 100000 seconds so as long as it is more than the session timeout you're probably safe!

A few downsides to this approach:

The WLC database could fill up to its maximum (generally unlikely but depends on deployment)

You will have inaccurate information on connected clients (depends how much you care)

Ric

[Scott Fella]

If you are trying to do a one time auth until the password changes, that is impossible. You can delay the session from timming out by increasing that but everyday they will need to connect back. Like Ric mentioned, you are better off using radius authentication so that users don’t have to enter any info. 

[sobin peter]

Hi Scott

I have changed the session delay to 28800. Can it be possible to increase more that value.