topic Re: How to configure Radius authentication for Hivemanager NG on Prem? in Aerohive Migrated Content

How to configure Radius authentication for Hivemanager NG on Prem?

oliver_eve — Thu, 25 Oct 2018 14:27:13 GMT

Hey,

We're in the process of migrating from HM classic to NG & for starters I've tried to setup the authentication method on Hivemanager NG to point login requests to our radius server but NG errors out everytime I login. I can see the authentication is successful on the NPS server but NG doesn't seem to work with it. I can also see on the NPS server that NG is downgrading the authentication method to PAP opposed to MSChap which is whats configured.

I've seen another post similar to this but no answer was given.

Any help would be appreciated.

Cheers

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Fri, 26 Oct 2018 02:51:17 GMT

Thanks for reaching out. As I posted in the other thread with the same question- We'd need to see a mirrored port packet capture that was running while you replicate this issue. This guide will walk you through how to set up a mirrored port packet capture- https://thehivecommunity.aerohive.com/s/article/Packet-Capture-with-Mirrored-Port

If you could send that to me at communityhelp@aerohive.com, I can take a look and let you know what we find.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

oliver_eve — Fri, 26 Oct 2018 14:13:27 GMT

No worries ill take a look. A bigger issue is the mandated use of an email address for logging into an internal box. As our internal domain does not match our email address the login always fails (as told by one of our technical account managers)

Can this be changed? The workaround is either an NPS re-write which is alot of hassles for something as basic as radius or wait for an AFI.

Cheers

Oli

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Sat, 27 Oct 2018 00:30:36 GMT

I will add this question to the case we are creating per this thread. I'm very sorry I can't give you an answer right away, but I'm sure our support team will be able to sort this out with you.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

belloli_n — Fri, 09 Nov 2018 22:25:44 GMT

I am also having the same two issues as Oliver. We worked around the fact that MSCHAP was being downgraded to PAP. But the email address is a problem for us as well with RADIUS. Is there any update into Oliver's issue?

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Fri, 09 Nov 2018 22:59:15 GMT

We are still working on this issue, would you be able to open a support case so we can get you in touch with a technician to work on these problems?

Re: How to configure Radius authentication for Hivemanager NG on Prem?

oliver_eve — Fri, 21 Dec 2018 22:41:50 GMT

Hey Sam,

I've tried going through our own support vendor & opening a direct support case but both have been useless. The support case directly with yourselves was closed because our support is handled via a different vendor. Our vendor reported the below statement back:

"We have been informed that this feature is working as intended and Aerohive have suggested to generate a feature request in the HiveManager by clicking the "how are we doing" box on the right hand side of any page."

What does this mean? I am struggling to understand why this is such a difficult thing to get working.

Are there any reps who i can demo this to on a webex as both methods to get this resolved have failed.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Mon, 24 Dec 2018 21:36:41 GMT

Thank you for letting me know. I'm sorry for the delay here, I am looking in to this for you on our side to see what our options are moving forward, but due to the holidays it might take a bit longer than usual to get a response. I will keep working on this for you until we get this resolved, please feel free to check in any time for an update either here or by contacting me directly at communityhelp@aerohive.com.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Thu, 27 Dec 2018 04:20:14 GMT

Thank you for your patience. I was able to confirm that the engineering ticket for this issue is still open so this is still an issue. The SAML method for logging in is working for on premises deployments, however the Radius AD/LDAP tie in is still having issues.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

oliver_eve — Wed, 02 Jan 2019 16:02:56 GMT

Thanks Sam,

Can you keep us updated with how this progresses?

Cheers

Oli

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Wed, 02 Jan 2019 23:47:24 GMT

Absolutely. I just confirmed that this was still an issue right before the holidays, I'll keep checking in and letting you know what I hear.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Thu, 03 Jan 2019 04:52:28 GMT

I just wanted to let you know that I was able to confirm the issue is still active today. To set expectations a bit, the soonest the fix for this will be available would be the next update that is released for the on premises HiveManager. I can't guarantee the fix will be in the very next release, but the fix will come out in a HiveManager release. I will of course continue to keep you updated on what I hear, and please feel free to check in any time for an update.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

samantha_lynn — Thu, 21 Feb 2019 04:51:47 GMT

Just to keep this post updated, I can now confirm that the fix for this issue is scheduled for the next on premises HiveManager release, which is scheduled to come out in the near future. I'll continue to keep you updated as I find out more.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

torsten_schoene — Tue, 09 Apr 2019 17:43:09 GMT

I also have the problem with the radius server. Is this bug fixed now? And wich version of the hivemanager NG ist this?

Re: How to configure Radius authentication for Hivemanager NG on Prem?

oliver_eve — Tue, 09 Apr 2019 17:56:11 GMT

12.8.3.3-NGVAFEB19

Seems to work now but i still need to use full domain logins i.e username@bla.bla.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

torsten_schoene — Tue, 09 Apr 2019 18:59:54 GMT

Not working for me with 12.8.3.3-NGVAFEB19

not with name, not with domainuser, not with user@domain (FQDN)

I configured the NPS with following Link (sorry, is a german Link)

https://sysadms.de/2018/12/hivemanager-admin-authentication-mit-radius/

Re: How to configure Radius authentication for Hivemanager NG on Prem?

oliver_eve — Wed, 10 Apr 2019 14:28:10 GMT

That is HM Classic so is configured differently. I no longer set the radius attribute.

Also in HM NG you need to predefine the users under account management in global settings.

If you're still struggling drop me a PM.

Re: How to configure Radius authentication for Hivemanager NG on Prem?

torsten_schoene — Wed, 10 Apr 2019 19:04:18 GMT

You are right. I delete the radius attribute and create the admin account in hivemanager with fqdn. Now it works.

Thanks for your help 