Troubleshooting Tip: RADIUS timeout during 2-Factor Authentication
Description
This article describes how to resolve a scenario where RADIUS is timing out between the appliance and the RADIUS server before the user can enter the second form of authentication.
Scope
FortiNAC-F v7.x and FortiNAC v9.x +.
Solution
Increase the timeout value. Contact Support for assistance:
- Log in as the root user to the Control Server CLI.
- For FortiNAC-F exec enter-shell and follow the same steps below. No special permissions are required to edit the file.
- Navigate to the /bsc/campusMgr/master_loader directory.
- Use an editor such as VI to open the .masterPropertyFile file.
- Add the following entry and save the file:
FILE_NAME=./properties_plugin/radiusManager.properties
{
com.bsc.plugin.radius.RadiusServer.socketTimeout=6000
}
- Restart FortiNAC using the following commands:
shutdownNAC
Wait 30 seconds, and then run the following command:
startupNAC
- From the CLI, navigate to:
cd /bsc/campusMgr/master_loader/properties_plugin
- Display the contents of the radiusManager.properties file to make sure the changes have been written correctly.
cat /bsc/campusMgr/master_loader/properties_plugin/radiusManager.properties | grep socketTimeout
