[Solved] User Login Timeout - RADIUS

Unimus support forum
Post Reply
hgtech
Posts: 4
Joined: Sun Dec 29, 2019 6:36 pm

Sun Dec 29, 2019 6:42 pm

We are using radius for user authentication to Uniums. Our radius server is integrated with DUO 2FA so when a user authenticates via radius, it sends a push notice to their mobile device to approve the connection.

This is working great except for one issue. The timeout on the Unimus login page is extremely quick. The login often fails before the user has received the DUO push notification and had time to respond.

Is there some setting in the config files that will allow us to extend the login timeout for the web interface to something like 60 seconds?

Thanks!
hgtech
User avatar
Tomas
Posts: 838
Joined: Sat Jun 25, 2016 12:33 pm

Sun Dec 29, 2019 10:09 pm

Hello,

Radius timeout can not be configured in the Unimus GUI, but you can adjust this using the configuration file.

Setting the Radius timeout is a little different in Windows and Linux.

On Linux, you need to edit "/etc/default/unimus", and append the option to the end of that file (not on a new line).
On Windows, add the option on a new line in the Unimus.l4j.ini file in 'C:\Program Files\Unimus\'.

The option to add is " -Dunimus.server.aaa.radius-timeout=30000".
(timeout is in milliseconds, so adjust as needed)

This will set the time Unimus waits for an Access-Accept (or Access-Reject) from the Radius server before refusing the login due to timeout.
hgtech
Posts: 4
Joined: Sun Dec 29, 2019 6:36 pm

Sun Dec 29, 2019 11:51 pm

Thanks for the quick reply Tomas! That was exactly what I needed.
Post Reply