Troubleshooting Tip: RADIUS timeout during 2-Factor Authentication

[cmaheu]

Description

This article describes how to resolve a scenario where RADIUS is timing out between the appliance and the RADIUS server before the user can enter the second form of authentication.

Scope

FortiNAC-F 7.x and FortiNAC 9.x +.

Solution

Increase the timeout value.  Contact Support for assistance.

1. Login as the root user to the Control Server CLI.
2. For FNAC-F exec enter-shell and follow the same steps below. No special permissions are required to edit the file.
3. Navigate to the /bsc/campusMgr/master_loader directory.
4. Use an editor such as VI to open the .masterPropertyFile file.
5. Add the following entry and save the file:

FILE_NAME=./properties_plugin/radiusManager.properties
{
com.bsc.plugin.radius.RadiusServer.socketTimeout=6000
}

6. Restart FortiNAC using the following commands:

shutdownNAC

Wait 30 seconds, and then run the following command:

startupNAC

7. From the CLI, navigate to:
   
   

cd /bsc/campusMgr/master_loader/properties_plugin

8. Display the contents of the radiusManager.properties file to make sure the changes have been written correctly.

cat /bsc/campusMgr/master_loader/properties_plugin/radiusManager.properties | grep maxResponseThreshold