Login failed to SSL VPN on SA-4500

[polanki55_]

I have user who cannot successfully login to SSL VPN fr the reason which can be see in a log file I am providing below:

2014-11-19 12:16:03 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA)[High Risk, Medium Risk, securemeeting] - Logout from 74.57.0.160 (session:2f36ff72)

Info        AUT22670            2014-11-19 12:15:57 - SA-4500 - [74.57.0.160] CA\mpatel(CompanyCA)[High Risk, Medium Risk, securemeeting] - Login succeeded for CA\mpatel/CompanyCA (session:2f36ff72) from 74.57.0.160.

Info        AUT22925            2014-11-19 12:15:56 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA) - Host Checker policy 'CheckMOB' failed on host 74.57.0.160. Reason: ''.

Info        AUT22925            2014-11-19 12:15:56 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA) - Host Checker policy 'CheckREG' failed on host 74.57.0.160. Reason: 'Can't find HKEY_CURRENT_USER\Volatile Environment\USERDNSDOMAIN; Can't find HKEY_CURRENT_USER\Volatile Environment\USERDNSDOMAIN; Can't find HKEY_CURRENT_USER\Volatile Environment\USERDNSDOMAIN; Adresse MAC requise introuvable.; Can't find HKEY_CURRENT_USER\Volatile Environment\USERDNSDOMAIN; Can't find HKEY_CURRENT_USER\Volatile Environment\USERDNSDOMAIN'.

Info        AUT22923            2014-11-19 12:15:56 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA) - Host Checker policy 'CheckFW' passed on host 74.57.0.160 for user 'CA\mpatel'.

Info        AUT22923            2014-11-19 12:15:56 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA) - Host Checker policy 'CheckAV' passed on host 74.57.0.160 for user 'CA\mpatel'.

Info        AUT24326            2014-11-19 12:15:48 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA) - Primary authentication successful for CA\mpatel/CompanyCA from 74.57.0.160

Info        AUT23457            2014-11-19 12:15:43 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA) - Login failed using auth server CompanyCA (Samba). Reason: Failed

Info        AUT24327            2014-11-19 12:15:43 - SA-4500 - [74.57.0.160] CA\mpatel (CompanyCA) - Primary authentication failed for CA\mpatel/CompanyCA from 74.57.0.160

Anybody would know what a reason could be?

[Kita_]

Hello Polanki,

I would need to review the debug log from the client machine to confirm the reason why, but it seems it is saying the machine is missing the following registry keys.  Was this working before?  Do we have a case opened for this so I can review the logs?

[zanyterp_]

The log shows that the user completed login successfully; is the issue that they are not getting the expected number of realms? As far as the reason for it failing, it could be that it is something that can't be sent from the client or there are passing and failing items in the rule CheckMOB, which yields an ambivalent result occasionally