|Applies To||RSA Product Set: SecurID|
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.0.x, 8.1.0
|Issue||With RADIUS authentication requests, the Real Time Authentication Monitor may show no entry for several reasons, so check the RADIUS Client statistics to look for rejects in Authentication Manager 7.1, 8.0 and 8.1.|
Authentication requests are silently discarded, or dropped, with nothing displayed in the Real Time Authentication Monitor or Authentication Activity Report.
Running tcpdump, Wireshark or sniffer network packet capture shows authentication requests set from the agent on 5500 UDP, but there are no replies coming back out of the Authentication Manager server.
See article 000016395 - Using tcpdump to troubleshoot authentication issues with RSA Authentication Manager 8.x for instructions using the tcp dump command.
In addition, proof of a silent discards will be seen in the /opt/rsa/am/server/logs/imsTrace.log
If logging is set to verbose, (see 000018205 - How to turn on/off verbose offline authentication logging), the source IP address of the unknown agent will be listed as an error. For example,
|Cause||A silent discard is a dropped authentication request without a corresponding entry in the Real Time Authentication Monitor or Authentication Activity Report. |
In Authentication Manager 8.0 and the base version of 8.1, auth requests from unknown authentication agents were silently discarded.
Silent discards can also occur when the Authentication Manager 8.x server does a reverse name lookup (for example, nslookup <IP_address>) of the agent's IP address and a name that is different from the configured agent name (including no name) is returned from DNS or /etc/hosts. This should be fixed in Authentication Manager 8.0 patch 8.
|Resolution||If no authentication agent exists, one can be created in the Security Console (Access > Authentication Agents > Add New).|
If the agent exists but you still get silent discards, verify that:
|Legacy Article ID||a64464|