01-09-2018 03:22 AM
Hello,
Been trying to get a working Guest Self registration Portal with Sponsor portal working but what ever Cisco document or forum post I use I have not been able to create a working enviroment. Ok maybe once, the first time config, but after further tweaking it broke, and never got it working again.
I created an new Sponsor Portal in ISE 2.3 Patch1. Created an specific Sponsor auth sequence (Local User/AD Domain), and configured the portal with minimal changes. Only Portal Settings page is changed.
When I test this Sponsor Portal I'm unable to login.(Authentication failed.)
When I view the guest.log I see the following:
2018-01-09 11:44:07,338 INFO [https-jsse-nio-***.***.***.***-8445-exec-1][] cpm.guestaccess.flowmanager.step.StepExecutor -::- Radius Session ID is not set, assuming in dry-run mode
2018-01-09 11:44:15,453 INFO [https-jsse-nio-***.***.***.***-8445-exec-5][] cpm.guestaccess.auth.utils.SponsorUtil -:<username>:- Authenticating sponsor user belongs to the following sponsor groups: <none>
2018-01-09 11:44:15,457 INFO [https-jsse-nio-***.***.***.***-8445-exec-5][] cpm.guestaccess.auth.authentication.SponsorLogin -:<username>:- inline correction getOrCreateSponsorUser: uniqueSubjectId=null fqSubjectName=null authStoreName=nul
l normailzedUserName=<username>
2018-01-09 11:44:15,457 INFO [https-jsse-nio-***.***.***.***-8445-exec-5][] cpm.guestaccess.auth.authentication.SponsorLogin -:<username>:- inline correction null uniqueSubjectId
2018-01-09 11:44:15,470 INFO [https-jsse-nio-***.***.***.***-8445-exec-5][] cpm.guestaccess.flowmanager.step.StepExecutor -:<username>:- Radius Session ID is not set, assuming in dry-run mode
So what am I missing??
Which log files should I look at for more troubleshooting info.
The account used for login is the same as used to login to the management server of Cisco ISE.
The only error we see in "Sponser Login and Audit": Sponsor authentication has failed; please see Failure Code for more details. But no failure reason given.
Update: when changing the sequence in the portal to "All_User_ID_Stores" it all works. But not the way we want it to work!!!!!
Update 2: The Sequence seems to be corrupt. Creating an new sequence fixes everything.
01-09-2018 04:54 AM
Did you map an ad group to a sponsor group?
When you created your local user did you make sure at the bottom it’s added to correct group?
Are you able to open tac case?
02-07-2020 06:59 AM
Good morning,
Did you find a solution for this issue, I'm facing kind of the same issue.
thanks.
02-07-2020 09:57 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide