Authentication prompts displayed repeatedly for an administrator who successfully logged in from WebUI
3151
Created On 08/23/24 06:55 AM - Last Modified 02/11/25 21:44 PM
Symptom
- WebUI Prompt is displayed for login
- Username/Password is correctly entered
- The message "Creating a management session. Please wait..." is displayed.
- Instead of the dashboard dashboard screen, the login screen is returned again.
- The login finally works with multiple attempts of username/password
Environment
- Palo Alto Firewalls or Panorama
- Supported PAN-OS
- Authentication
Cause
- The IP address of the source is constantly changing.
- This is seen in the system logs (show log system)
- The same administrator 'testadmin' authenticated in short intervals from different IP addresses.
:58 info auth auth-su 0 authenticated for user 'testadmin'. From: 10.0.0.100.
:15 info auth auth-su 0 authenticated for user 'testadmin'. From: 10.0.0.100.
:20 info auth auth-su 0 authenticated for user 'testadmin'. From: 10.0.0.100.
:39 info auth auth-su 0 authenticated for user 'testadmin'. From: 10.0.0.102.
:55 info auth auth-su 0 authenticated for user 'testadmin'. From: 10.0.0.104
:15 info auth auth-su 0 authenticated for user 'testadmin'. From: 10.0.0.105.
- Phpdebug.log (/var/log/pan) reports the following.
"User is logged out due to isSameClient check failed
Resolution
Change the client IP to use static IP address for the users accessing management IP address.
Additional Information
How To Collect Web Interface Debug Logs