RADIUS Group Extraction Failing with Error "Extracted group : Null"

RADIUS Group Extraction Failing with Error "Extracted group : Null"

book

Article ID: CTX220557

calendar_today

Updated On:

Description

NetScaler unable to extract the group from the Radius server and we get the following response from the Radius server "Extracted group : Null" in aaad.debug log.

Resolution


Citrix Group Vendor identifier was wrongly configured and changing the Group Vendor identifier value to 3825 under Radius parameter fixed the issue.

Trace with incorrect Group Vendor identifier
---------------------------------------------------------------
User-added image

Trace with correct Group Vendor identifier
---------------------------------------------------------------

User-added image

aaad debug log (non_working)

User-added image

aaad debug log (working)

/usr/home/build/rs_105_60_7004_e_CB74_RTM/usr.src/netscaler/aaad/radius_drv.c[1939]: process_radius radius accepts : admin_sgadsby

Wed Feb  1 17:57:37 2017

/usr/home/build/rs_105_60_7004_e_CB74_RTM/usr.src/netscaler/aaad/radius_drv.c[1941]: process_radius extracted group string :owner


Problem Cause

Configuration issue.

Issue/Introduction

NetScaler unable to extract the group from the Radius server and we get the following response from the Radius server "Extracted group : Null" in aaad.debug log.