zyxel and sso

LeviPonti

Hi,
 i have a problem with a subnet in my LAN:
I use SSO installed in my AD and it works correctly in all subnets except one. The subnet is 192.168.21.X and the message of log SSO is:

[2021/04/02 10:22:13 AM] [Client] [WARN] Failed to query client: 192.168.21.4, Error code = 103.

[2021/04/02 10:22:13 AM] [Operation] [DEBUG] Push logout event of [provadoc][ITISLEVI][192.168.21.4] to queue.

[2021/04/02 10:22:13 AM] [DC] [INFO] provadoc@ITISLEVI, IP:192.168.21.4 logoff successfully from DC: ITISLEVI.

2021/04/02 10:22:13 AM] [Gateway] [INFO] Succeed in connecting to Gateway(192.168.1.77).

[2021/04/02 10:22:13 AM] [Gateway] [INFO] Succeed in sending information of provadoc(192.168.21.4) to Gateway(192.168.1.77).

My zyxel is 192.168.1.77

if i logout from client and relog returns to work correctly.

Can anyone help me ?

LeviPonti

Hi,
now the problem has spread to other subnet; randomly some pc not all.
if i logout from client and relog returns to work correctly.

Can anyone help me ?

Podo

When this happen do you see that the user in the SSO agent's logon user list and the login user in usg's web gui?

LeviPonti

The user is in the sso agent's logon user list but not in usg's web gui.

Zyxel_Can

Hi @LeviPonti,

 

Please share some information with us:

 

1- Which subnets are affected by this symptom?

2- What is your Windows Server's version?

3- Does this symptom occurs for every users randomly in the subnet 192.168.21.X or it occurs especially to specific users (hosts)? 

4- Please share your current config file with me by private message. And if this is always seeable, please help to collect the packets during the negotiation and send me by private message.

LeviPonti

1- (192.168.21.X, 192.168.13.X, 192.168.8.X, 192.168.4.X,192.168.14.X)
2-Windows server 2019 standard
3-symptoms occurs for random users
4-where can i find the packets?

Zyxel_Can

Hi @LeviPonti,

Please login to your USG210’s Web GUI, navigate to Maintenance > Diagnostics > Packet Capture menu, choose the interfaces you want to capture packets.

If this symptom easy to reproduce, choose the interfaces then please first click on the Capture button, reproduce the issue, click on the stop button.

After capturing is done, please find the files in Maintenance > Diagnostics > Packet Capture > files menu and provide me by private message.

LeviPonti

It is not easy to reproduce the fault but I will try shortly.