For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sadorect_151355's avatar
Sadorect_151355
Icon for Nimbostratus rankNimbostratus
Sep 18, 2015

APM RADIUS AUTH FAILURE

Hi All,

 

Please I need help for APM-RADIUS authentication. The Radius-Auth module comes after the AD-Query module and is expected to usher in the two-factor authentication. However I keep getting this error:

 

(error: packet verification failed, most likely the shared secret is not correct)

 

I googled the error and landed on SOL15789 but the troubleshooting steps in the article seems irrelevant to the box am working on (11.6) because I can't find the paths and objects referred to in the SOL. Please help

 

3 Replies

  • that SOL is related to BIG-IP authentication, not APM specific.

     

    but the error points to you not correctly configuring the shared secret on the BIG-IP or on the RADIUS server. make sure it matches. try with somthing simple and make it more complex if you need to. also make sure you don't use some special characters, i believe for example isn't allowed.

     

  • Thank you Boneyard. Please, may I have an insight into what other characters are not permitted in the authentication string? Thanks

     

  • The complexity requirements for radius shared secret key depends on the radius server vendor.

     

    MS radius server supports shared secret of up to 128 characters in length, but FreeRADIUS is limited to 31 characters for the shared secret.

     

    I suggest you to configure a simple password for shared secret and make the authentication working first. Then make it as a complex password.

     

    Hope this helps.

     

    -Jinshu