XUA: XUA_EXECUTE_RSA_PROXY successful but no passcode prompt is received
The timeout value should be increased and the underlying issue causing the timeout should be investigated.
If XUA_EXECUTE_RSA_PROXY is successful but no RSA passcode prompts are received check the timeout value that is configured.
In XUA versions 2.30 and older the RSA proxy test does not use the same value configured in the UACONF so the proxy test may work, while an actual authentication attempt may timeout. The result is that XUA_EXPLAIN and actual logon attempts may fail to authenticate despite the proxy test showing a success.
It is important to note that if the RSA proxy is timing out the root cause should be investigated, as this issue could be persistent and re-occur even if the timeout value was increased.
*This is corrected as of XUA 2.35, scheduled for release Q1 2021.
If you are unable to locate the solution needed or if you need additional assistance please Click Here to open a case from our Customer Care Portal.
Related Articles
XUA: RSA Authenticated user and SFTP
Add the below setting to UAACL using XAC_EDIT_ACL. UAGROUP SN-RSA-MAP-TEST DESCRIPTION "RSA Logon with Mapping" FROM_USER $EVERYONE TO_USER support.sam MAP re:"GRP80.TST010" REPLACE "scottfob" EXIT MAP re:"SUPPORT.SAM" REPLACE "scottfob" EXIT MAP ...
XUA:LDAP proxy can't resolve hostname if LDAP_HOST contains a URL prefix
Solution: Remove the URL prefix from the LDAP_HOST entry on the UACONF file. Steps to resolve an error due to a URL prefix Step 1: Logon as an owner of the XUA installation Step 2: Open the UACONF file and remove the URL prefix such as 'ldaps://' ...
XUA: LDAP and RSA installation Directory create failure for /rsa
The error can be ignored if the RSA web service isn't going to be used. This is the last step the installation does before doing xua_finish_install (if 255,255) or asking to complete the installation by logging on as 255,255 and running a ...
XUA: TESTRSA works but RSA logon from a TACL prompt is timing out
The error 1079 is HEX, 4217 Decimal. 4217 [ETANOTRUNNING] Socket transport server not running. The socket transport server is $SYSTEM.SYSnn.OSSTA. It has to be running in every CPU. It is missing from one of the CPUs and that is where the running ...
XUA/XPQ: Using Password Program to change passwords for RSA or Radius users
If executing the HPE password program or an XPQ version of PASSWORD prior to the XPQ release 3.45, then a UAGROUP(s) must be added to the UAACL file (XUA) to process the authentication when the requestor is the PASSWORD program and the user is a user ...