GlobalProtect-openconnect icon indicating copy to clipboard operation
GlobalProtect-openconnect copied to clipboard

Published 20 hours ago • verified publisher icon yuezk

Authentication failed, please try again

Open gperianez-stratio opened this issue 3 years ago • 9 comments

Authentication failed, please try again

gperianez-stratio avatar Sep 08 '22 06:09 gperianez-stratio

I have the same issue today. It's still working fine yesterday. The app take long to Authenticate then got failure

haihn168 avatar Sep 08 '22 10:09 haihn168

I have no changes released recently, looks like it's a problem regarding the VPN server. Is the problem still there?

yuezk avatar Sep 09 '22 13:09 yuezk

When I need to enter a password the authentication fails.

Next try then does not require entering a password and connects right away.

hramrach avatar Sep 21 '22 08:09 hramrach

I have the same issue now, after a system reboot. Before the reboot it was working fine. I think the client should ask me to give 2FA token before system reboot, but it don't happened

dchristofolli avatar Oct 02 '22 15:10 dchristofolli

@dchristofolli Currently, there could be two kinds of 2FA.

The first one is the asked by external authentication, e.g., some SAML authentication providers could ask for 2FA in the popup login window.

Another 2FA is asked by the VPN server, you would see a dialog to ask you to input the 2FA code.

The workflows of these two kinds of 2FA is different. So I need to make sure which type of 2FA are using.

yuezk avatar Oct 04 '22 00:10 yuezk

ok, so when the popup login window is used most of the time the connection fails with authentication failure but the authentication result is saved somewhere and if you try to connect again right away no authentication is required and you are immediately connected.

I am not sure how to differentiate a 'popup login window' and a 'dialog' but I am pretty sure external authentication provider is used.

hramrach avatar Oct 04 '22 08:10 hramrach

@hramrach From my understanding, have you encountered the error page shown below?

image

yuezk avatar Oct 05 '22 01:10 yuezk

I cannot reproduce the problem right now because I am authenticated already. I think it looked different but not sure.

hramrach avatar Oct 05 '22 08:10 hramrach

I created a new user and my conclusion is that the problem is the identity provider.

I could not reproduce the exact same problem but here is the thing:

First it asks for USB token but complains that 'device is not registered' whatever that means.

Then I choose user and password instead and I get into my profile settings but cannot proceed to the VPN because it asks for a second factor but the USB key still cannot be used because 'device is not registered'.

Then I close it and authenticate again, and now the VPN connects.

hramrach avatar Oct 05 '22 09:10 hramrach