admin9 (RSA) to rsaSFDCadmin (RSA): asked a question.
Radius Authentication Issue
Has anybody seen this error before when trying to make a success radius
authentication request this is what was in the logfile on on our RSA server:-
We have 3 servers that try to a make this request and only 1 of them work
successfully.
Thu Aug 3 00:00:03 2023 : Info: HUP - No files changed. Ignoring
Thu Aug 3 03:01:08 2023 : Info: ... adding new socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 03:01:08 2023 : Info: ... shutting down socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 03:01:08 2023 : Info: ... adding new socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 03:01:08 2023 : Info: ... shutting down socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 14:15:30 2023 : Info: Adding client XXX.XXX.XXX.XXX/32
Thu Aug 3 14:15:30 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{9d}J\x{bd}\x{90}\x{d4}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:15:30 2023 : Auth: (35078) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:27 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 430 (before "\x{8a}O\x{dc}Yro\x{cc}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:27 2023 : Auth: (35079) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:29 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 433 (before "\x{b7}\x{9e}\\\u0004f...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:29 2023 : Auth: (35080) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:32 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 430 (before "\x{9c} w7\\\u0002\x{a0}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:32 2023 : Auth: (35081) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:34 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{eb}\x{e7}{HR`\x{b9}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:34 2023 : Auth: (35082) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:43 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{d6}\x{f5}\x{93}*\x{aa}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:43 2023 : Auth: (35083) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:46 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{a6}\\\"\x{81}U\x{dc}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:46 2023 : Auth: (35084) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 15:10:21 2023 : Info: Adding client 10.32.250.209/32
Thu Aug 3 15:10:22 2023 : Auth: (35085) Login OK: [USERNAMEXXX] (from client
SERVERNAMEXXX port 0)
authentication request this is what was in the logfile on on our RSA server:-
We have 3 servers that try to a make this request and only 1 of them work
successfully.
Thu Aug 3 00:00:03 2023 : Info: HUP - No files changed. Ignoring
Thu Aug 3 03:01:08 2023 : Info: ... adding new socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 03:01:08 2023 : Info: ... shutting down socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 03:01:08 2023 : Info: ... adding new socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 03:01:08 2023 : Info: ... shutting down socket command file
/opt/rsa/am/radius/control-socket/radiusd.sock
Thu Aug 3 14:15:30 2023 : Info: Adding client XXX.XXX.XXX.XXX/32
Thu Aug 3 14:15:30 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{9d}J\x{bd}\x{90}\x{d4}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:15:30 2023 : Auth: (35078) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:27 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 430 (before "\x{8a}O\x{dc}Yro\x{cc}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:27 2023 : Auth: (35079) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:29 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 433 (before "\x{b7}\x{9e}\\\u0004f...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:29 2023 : Auth: (35080) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:32 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 430 (before "\x{9c} w7\\\u0002\x{a0}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:32 2023 : Auth: (35081) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:34 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{eb}\x{e7}{HR`\x{b9}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:34 2023 : Auth: (35082) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:43 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{d6}\x{f5}\x{93}*\x{aa}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:43 2023 : Auth: (35083) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 14:22:46 2023 : Error: rlm_perl: Exception when calling
rsa_securid_mfa_call: Exception in
rsa_securid_mfa_first_step_process_initialize when calling
UserApi->initialize: malformed UTF-8 character in JSON string, at character
offset 429 (before "\x{a6}\\\"\x{81}U\x{dc}...") at
/opt/rsa/am/radius/raddb/mods-config/perl/rsaMFA/Object/Initialize.pm line 96.
Thu Aug 3 14:22:46 2023 : Auth: (35084) Login incorrect: [USERNAMEXXX] (from
client SERVERNAMEXXX port 0)
Thu Aug 3 15:10:21 2023 : Info: Adding client 10.32.250.209/32
Thu Aug 3 15:10:22 2023 : Auth: (35085) Login OK: [USERNAMEXXX] (from client
SERVERNAMEXXX port 0)
same on all the AM servers. You configure it on the AM Primary server and it's
replicated out to your AM Replica servers. So you might want to check the
Radius server configuration on the NAS device.