Authentication Portal generates 500 Internal Server Error

Authentication Portal generates 500 Internal Server Error

5331
Created On 05/28/24 08:54 AM - Last Modified 12/12/24 05:08 AM


Symptom


  • User is configured to receive a captive portal page.
  • The firewall presents him a captive portal Page.
  • Now the user changes the language on the browser from English to French (or any other).
  • User enters the credentials and clicks on login.
  • Here the captive portal (Authentication Portal) displays "500 Internal Server Error"

image.png

Environment


  • Palo Alto Networks Firewalls
  • Supported PAN-OS
  • Authentication Portal in Redirect Mode

Cause


  • The firewall is expected to receive an HTTP POST with a payload that has the ok: field set to Login:
    image.png
  • But when the authentication portal is translated, the payload of the HTTP POST doesn't have the ok: field set to Login, so the firewall considers this as a different page.
    image.png

  • l3svc_ngx_error.log generates the following error:
> tail follow yes mp-log l3svc_ngx_error.log
21:15.923 -0700 Error:  pan_parse_uid_post_params(pan_l3svc_utils.c:2347): Login OK not present

Resolution


  1. This is expected as the "ok" field is now changed.
  2. The resolution is not to change the web page language during authentication.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000scHcCAI&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language