> Source: [sk96287](https://support.checkpoint.com/results/sk/sk96287)

# sk96287 - Repeat authentication is required when using Captive Portal

| Property | Value |
|----------|-------|
| Solution ID | sk96287 |
| Date Created | 2015-10-21 |
| Last Modified | 2022-10-02 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Users are randomly unable to authenticate in Captive Portal:  

  "`Login failed. If the problem persists please contact your administrator.`"

* SmartView Tracker repeatedly shows the following Identity Awareness logs:

  *

    |-----------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
    | Authentication Method | User and Password Authentication                                                                                                                                                                         |
    | Authentication Status | Failed Login                                                                                                                                                                                             |
    | Description           | An error was detected while trying to connect to / authenticate against the AD server. It may be a problem of bad configuration of connectivity. Please refer to the troubleshooting guide for more help |
    | Identity Source       | Captive Portal                                                                                                                                                                                           |
    | Information           | Authentication trial: this is a reauthentication for session XXX                                                                                                                                         |

    <br />

    <br />

  *

    |-----------------------|------------------------------------------------------------------|
    | Authentication Method | User and Password Authentication                                 |
    | Authentication Status | Failed Login                                                     |
    | Description           | Bad username of password                                         |
    | Identity Source       | Captive Portal                                                   |
    | Information           | Authentication trial: this is a reauthentication for session XXX |

* Debug of PDP daemon ('`pdp debug set all all`') shows:

  `
  [ PID ]@HostName[Date Time] Retry User By Name<name = USERNAME>`  
  `
  ...`  
  `
  [ PID ]@HostName[Date Time] auth_fail_delay_cb(au=...): start`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Events)] static void pdp::UserPasswordAuthenticator::ChallangeAuthAsync(auth_io_t*): Authentication challenge`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Events)] static void pdp::UserPasswordAuthenticator::DoneAuthAsync(_auth_t*): UserPasswordAuthenticator::DoneAuthAsync`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Events)] static void pdp::UserPasswordAuthenticator::DoneAuthAsync(_auth_t*): DoneAuthAsync error code: 2`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Events)] static void pdp::UserPasswordAuthenticator::DoneAuthAsync(_auth_t*): `***authentication operation failed with lookup algorithm GUEST_LOOKUP_NONE, external error code:6 external error description:An error was detected while trying to connect to / authenticate against the AD server.***` `  
  `
  ...`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Events)] static void pdp::UserPasswordAuthenticator::SendAuthReply(_auth_t*): SendAuthReply for request ID: ...`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Events)] static void pdp::UserPasswordAuthenticator::GetUserFullName(fwset*, std::string&): called`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Surprise)] static void pdp::UserPasswordAuthenticator::GetUserFullName(fwset*, std::string&): failed to get user full name data from user auth object`  
  `
  [ PID ]@HostName[Date Time] [AUTH(TD::Important)] static void pdp::UserPasswordAuthenticator::SendAuthReply(_auth_t*): `***authentication failed with external error code 6 external description: An error was detected while trying to connect to / authenticate against the AD server.***` `  
  `
  ...
  `

## Cause

Active Directory server is not reachable within a pre-determined time, so the authentication requests are timing out.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content