 Re: No Client Auth Rules Available
No Client Auth rules can also be caused if you're using the legacy single sign on mechanism (sso-root user) and the system presenting the sso-root credentials is not in the allowed sources for that authentication rule.
For instance, if anyone at 10.1.1.x is allowed to log in, but the server handling single sign-on is at 10.1.2.x presents the credentials, the single sign on will not have any applicable rules even if the user is actually at 10.1.1.x. Add the server using the single sign on account into the group of allowed sources for that rule, and now the user will be properly logged in from 10.1.1.x.
(This is probably a bug or oversight, but might be driving some people nuts. It's probably pretty rare for the sso-root system to be used.) |