Unable to authenticate to radius with username more than 20 characters

Hi folks,

 

 

I'm implementing an iRule for radius authentication as below

 

 

when CLIENT_ACCEPTED {

 

set authinsck 0

 

set forceauth 1

 

set ckname BIGXAUTH

 

set ckpass 1xxx5678

 

set ckvalue [IP::client_addr]

 

set ckdomain .foo.com

 

set asid [AUTH::start pam default_radius]

 

}

 

 

This became problem when certain users with username trying to authenticate using username more than 20 characters. We did not see log information in the cisco ACS server. This behaves differently when users trying to authenticate with username less than 20, it’ll be logged in the ACS server even with failed password. I’ve check with tcpdump but nothing can be seeing during the authentication progress.

 

 

Is that related with set ckname 1xxx5678 ?

 

 

Thanks,

 

Aan