Solved: Lobby ambassador can't log in - Page 2

JohnCKirk · ‎11-05-2023

I recently upgraded a 9800 WLC from IOS XE 17.9.3 to 17.9.4a. After that, I've noticed that the lobby ambassador account can't log in. The login page displays normally, and I can enter the username/password, but then I get an error page:

If I log in as a WLC admin user, everything works fine.

I've checked the web server logs after a failed login attempt, and I noticed these lines:

2023/11/03 15:17:08.141254538 {nginx_R0-0}{2}: [stdout] [31224]: UUID: 0, ra: 0 (note): [error] 31231#0: *13475 lua entry thread aborted: runtime error: /var/scripts/lua/features/indexhtml.lua:40: bad argument #1 to 'eval' (string expected, got nil)

2023/11/03 15:17:08.141254908 {nginx_R0-0}{2}: [stdout] [31224]: UUID: 0, ra: 0 (note): stack traceback:

2023/11/03 15:17:08.141255280 {nginx_R0-0}{2}: [stdout] [31224]: UUID: 0, ra: 0 (note): coroutine 0:

2023/11/03 15:17:08.141255660 {nginx_R0-0}{2}: [stdout] [31224]: UUID: 0, ra: 0 (note): [C]: in function 'eval'

2023/11/03 15:17:08.141256098 {nginx_R0-0}{2}: [stdout] [31224]: UUID: 0, ra: 0 (note): /var/scripts/lua/features/indexhtml.lua:40: in function 'getVersion'

However, I don't know whether it's a problem with the script itself or just with the arguments that are being passed to that script. Either way, it looks like a bug in the WLC software.

Searching the community, I've seen some similar issues with older versions:
WLC And Lobby Ambassador - Cisco Community
Solved: URL fail when access by Lobby-Admin - Cisco Community

Those were solved by an upgrade or by specifying a different URL. However, I can't find anything similar for this version. Is anyone else having the same problem?

Rich R · ‎11-20-2023

> I see that it is still not a recommended version
TAC and BU will normally allow at least 4-6 weeks of stable customer deployments before a release is recommended or gold star.

I have 17.12.2 running on my 9120 EWC already.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

JohnCKirk · ‎01-11-2024

Looking at the bug report, they now list 4 fixed versions:

17.3.1
17.12.2a
17.12.2
17.12.02a

I assume that the 2nd and 4th options are the same, but neither of them are available for download yet.

17.9.4 and 17.9.4a are still the recommended versions. However, I've now upgraded my WLC to 17.12.2 and that fixed the problem. I haven't seen any other issues since the upgrade, so I recommend that to anyone else who's having the same problem.