HP-UX Mobile IPv4 A.03.01 Administrator's Guide

8GTKH[KPICPF6TQWDNGUJQQVKPI
%QOOQP2TQDNGOU
Chapter 8
102
AAA Authentication Errors (HME_AUTH_FAIL, FOR_AUTH_FAIL)
If a AAA Mobile Node fails the authentication check on the AAA Home Agent Server
(AAAH), the AAAH will send the Home Agent an error indication. The Home Agent will
log warning event messages similar to the messages below:
Feb 3 15:38:14 hpindhqo mipd[15897]: WARN: HA: Non-Success return
code (4001: Result-Code: Authentication process failed) in AMA for
MN ([e-mail])
Feb 3 15:38:14 hpindhqo mipd[15897]: WARN: HA: Replying with Error
‘HME_AUTH_FAIL’ to MN [e-mail] (11.11.11.4)
The Foreign Agent also receives an error indication. The Foreign Agent will log warning
event messages similar to the messages below:
Feb 3 15:38:44 WARN: FA: Non-Success return code (4001:
Result-Code: Authentication process failed) in AMA for MN
([e-mail])
Feb 3 15:38:44 WARN: Replying with Error 'FOR_AUTH_FAIL'
After entries similar to the above entries, you may also see entries in the Foreign Agent’s
log file that indicate stale challenges from the Mobile Node (FOR_STALE_CHALLENGE).
These entries are generated because the Foreign Agent marks the challenge value as
“stale” for the Mobile Node after the authentication fails. If the Mobile Node re-tries to
register and uses the same challenge value, the Foreign Agent will reject these requests
and log FOR_STALE_CHALLENGE warning messages.
Solution Correct the Mobile Node’s AAA authentication configuration and/or the
Mobile Node’s configuration.