The Novell BorderManager 3.7 Authentication Services status display provides status messages that are helpful in troubleshooting user access problems. You can view the status display in the following ways:
RADIUS display {on|off}RADIUS display {+|-} {failure|success}RADIUS SystemLog {on|off}RADIUS SystemLog file_locationRADIUS SystemLogSize new_sizeRADIUS SystemLogPolicy [daily|weekly|days]RADIUS LogStatus
Each message is listed with the possible causes.
Device not enabled
The authentication device has not been enabled for use.
Device not present
The authentication device was not detected.
Exceeded concurrent login limit
The number of remote connections has exceeded the limit specified in the Dial Access System object or User object.
Invalid password
Possible causes:
Login disabled
The user eDirectory account has been disabled on the login restriction page.
Method not allowed
The specified authentication method is not permitted by the Authentication Device Manager.
Method not supported
The Authentication Device Manager does not support the authentication method.
No authentication policy configured
No authentication policy has been configured for the Dial Access System object.
No devices assigned
No authentication device has been assigned to the User object.
No more search domains
All search domains defined for a Dial Access System object have been searched without success.
No service data
No service data is available for the authentication device.
No such context
The specified NDS or eDirectory context does not exist.
No such domain
The domain name is not defined on the Dial Access System object.
No such profile
The Dial Access System object does not have Browse and Read rights to the Dial Access Profile object.
No such proxy target
No entry exists in the proxy target page for the domain that the user entered.
No such service tag
No service is defined for the User or container object that matches the service tag entered by the user.
No such user
Possible causes:
Password expired
The eDirectory password has expired.
Proxy rejected
The target RADIUS server rejected the authentication request. Consult the output of the final RADIUS server in the proxy chain to determine the problem.
Unknown method tag
The authentication method tag is not defined for the Dial Access System object.
User not a member of dial access system
Possible causes:
User not enabled for RADIUS login
Possible causes:
Proxy loop detected
The chain of proxy RADIUS servers has been configured in a loop. A loop is an invalid configuration. Check your proxy target configuration to ensure that no loops occur.
Unknown RADIUS client
No entry exists in the Dial Access System client table for the RADIUS client that issued the access request.
RADIUS Error -150
Insufficient Memory
A system error has occurred (sufficient memory was not available to satisfy the current memory allocation request).
RADIUS Error -307
Missing NDS or eDirectory Replica
The NDS or eDirectory replica that the RADIUS server is using failed.
RADIUS Error -601
The Dial Access System object is not valid.
RADIUS Error -672
The user does not have sufficient rights to perform this operation.
RADIUS Error -801
Insufficient Buffer
An internal failure occurred (the system allocated a buffer of insufficient size).
RADIUS Error -802
Invalid Request
An invalid request was received.
RADIUS Error -803
No Such Attribute
Possible causes:
RADIUS Error -804
Invalid Data
Malformed data was detected in the eDirectory directory.
RADIUS Error -805
Invalid Transport
The host system is not configured properly for TCP/IP.
RADIUS Error -806
Invalid Signature
The signature on a proxy reply message is invalid.
RADIUS Error -807
Invalid Data Version
Unknown data was found in the eDirectory directory.
RADIUS Error -808
Proxy Loop Detected
The chain of proxy RADIUS servers has been configured in a loop. A loop is an invalid configuration. Check your proxy target configuration to ensure that no loops occur.
RADIUS Error -809
Invalid Parameter
An invalid parameter value was specified.
ADM Error 900
Device Already Supported
The authentication device is already defined.
ADM Error 901
Invalid Structure Version
An invalid version was specified.
ADM Error 902
Invalid Request Entry Point
An invalid request was specified.
ADM Error 903
Device Not Present
The authentication device is not present.
ADM Error 904
Method Tag Already Supported
The authentication method tag has already been defined.
ADM Error 905
Invalid Snap-In Handle
The snap-in handle is not supported.
ADM Error 906
Invalid Subject
The subject is not supported.
ADM Error 907
Unknown Method Tag
The authentication method is not supported.
ADM Error 908
Method Not Allowed
This authentication method is not permitted.
ADM Error 909
Invalid Policy Count
An invalid policy count was specified.
ADM Error 910
Invalid Service Count
An invalid service count was specified.
ADM Error 911
Invalid Policy Type
This authentication policy is not supported.
ADM Error 912
Method Not Supported
This authentication method is not supported.
ADM Error 913
No Devices Assigned
No authentication devices have been assigned to a User object.
ADM Error 914
No Default Device
No default authentication device has been specified.
ADM Error 915
No Service Data
No service data is available.
ADM Error 916
Invalid State
The authentication device is in an invalid state.
ADM Error 917
Snap-In Registration Table Empty
An error occurred to the snap-in registration table.
ADM Error 918
Memory Allocation
A memory allocation error has occurred.
ADM Error 919
Unable to Locate Snap-in
The snap-in module cannot be found.
ADM Error 920
Invalid NDS or eDirectory Response
An invalid NDS or eDirectory response was received.
ADM Error 921
Unsupported Version
An unsupported version is being used.
ADM Error 922
No Such Attribute
This attribute is not supported.
ADM Error 923
Invalid Encryption Type
This encryption type is not supported.
ADM Error 924
Invalid Service Tag
This service tag is not supported.
ADM Error 925
Invalid Object DN
The distinguished name for the object is not valid.
ADM Error 926
Unable to Locate Pending Request
A pending authentication request cannot be located.
ADM Error 927
Unable to Load Snap-In
The snap-in module cannot be loaded.
ADM Error 928
Unable to Retrieve Required Data
The required data cannot be retrieved.
ADM Error 929
Shutdown in Progress
The program is being shut down.
ADM Error 930
Device Not Enabled
The authentication device is not enabled.
ADM Error 931
Invalid Buffer Size
An invalid buffer size was specified.
ADM Error 932
Invalid Authentication Materials
An invalid configuration was supplied.
ADM Error 933
Unsupported Cryptography Algorithm
This cryptography algorithm is not supported.
ADM Error 934
Invalid Password
An invalid password was specified.
ADM Error 935
Login Disabled
Login for the user is disabled.
ADM Error 936
Account Expired
The user account has expired.
ADM Error 937
Password Expired
The supplied password has expired.
ADM Error 938
Intruder Detection
An intruder has been detected.