Troubleshooting Tip: To lock, disable and re-enable a guest user showing error 'New password cannot be the same as your current password'

Description

This article provides details about a known issue in FortiAuthenticator where a guest user cannot be locked, disabled, or re-enabled.

Scope

FortiAuthenticator.

Solution

When attempting to lock, disable, or re-enable a guest user from the User Management -> Guest Users menu, the following error message is encountered:

'New password cannot be the same as your current password'

As a result, the guest user cannot be locked, disabled, or re-enabled due to this error:

This issue occurs even when no attempt is made to modify the guest user's password.

As a workaround, disable the Enforce password history option in the default password policy on the FortiAuthenticator (FAC).
After disabling this setting, the error message no longer appears, and entering a new password is no longer required when locking or disabling the guest user.

In particular, a guest user cannot be locked, disabled, or re-enabled if the Enforce password history option is enabled.

This issue is tracked under ID 1282471 and will be resolved in FortiAuthenticator GA releases v6.6.10 and v8.0.4.