ITATS528E Authentication failure for user xxxxx: <IP address> (code:-105)

[KushHebga]

Radius Authentication Failure

We have configured radius,but the authentication fails with below error,

"ITATS528E Authentication Failure for user XXXX" Code:-105"

we are integrated rsa securid access with cyberark pvwa portal, as on documents we are integrated with pvwa and configured on vault server , after I getting error on pvwa portal Authentication failure for user code 105.

its communication between vault to radius server.

Appreciate any suggestions.

[StevenSpicer]

What shows up for that user in the Security Console?

[_EricaChalfin]

Kush Hebga‌,

I deleted your screen shots and changed the title of your post because they contained sensitive information (user name and IP addresses).

Please review https://community.rsa.com/community/products/securid/blog/2018/11/27/tips-for-posting-questions-to-the-rsa-securid-access-community for more information on what should and should not be posted on RSA Link.

Regards,

Erica

[PiersB · Accepted solution]

Hi Kush Hebga‌,

I would suggest you follow-up with CyberArk first. The error message, format, and error code are not recognizable as those provided by our product. If you're not seeing any messages at the RSA Authentication Manager server audit logs, I would recommend examining logs that might be available from CyberArk. It is possible there's some configuration issue preventing the authentication from being sent to RSA Authentication Manager.

I would recommend you consider engaging Customer Support for assistance.

Regards, -Piers

[_EricaChalfin]

Kush Hebga‌,

If you are using RADIUS, you may want to review 000014905 - Performing RADIUS authentication tests with NTRadPing to RSA Authentication Manager.  The NTRadPing interface will provide details on why the RADIUS authentication failed and may be helpful to CyberArk in their troubleshooting.

If your token(s) are in New PIN Mode, also take a look at 000027040 - How to set PINs and navigate Next Tokencode Mode for RSA SecurID Tokens using NTRadPing.

Regards,

Erica