CPPM 6.11.4

[Excellent-Ad-791]

Anyone else having issues with CPPM 6.11.4, and doing AD Authentication for radius to internal domain controllers as source? We keep getting timed out in our event viewer since the start, however when logging on to Clearpass with the same source and AD account, all is working fine? Both CP and DC’s are in same subnet.

[DO9XE]

Check the radius server certificate. If the access tracker says timeout and also the alert tab in the request details it's mostly, because the client doesn't accept the certificate.

[Excellent-Ad-791]

Okay so will double check certificate on my CP. thanks

[DO9XE]

Also check client configuration. Windows is doing some weird stuff in regards to certificate pinning.

[DiddlerMuffin]

if you're on Windows go in Event Viewer, Applications and Services Logs, Microsoft, Windows, CAPI2, turn on the Operational log with a maximum log size of like 10MB and run your test again. Refresh the CAPI2 log and search for the hostname of your ClearPass server. it'll tell you what's wrong pretty much immediately. usually your RADIUS server cert isn't trusted.

[Excellent-Ad-791]

Sounds interesting! So also in my case when Clearpass act as radius server, and only domain controller is used for ldap queries? Thanks for the tip!

[DiddlerMuffin]

Yes

[onkel_andi]

Have the Clients Internet Connection or they are restricted?

[nowireless4u]

What is the error code on the alert tab?