Staff

Troubleshooting Tip: Do not use group name as name for user

Description

This article explains why it is not a good practice to use a group name as a name for a user.

Scope

FortiGate.

Solution

incorrect creds.jpg

For example, an admin created a username, 'Application', to denote a user who uses a certain application.
Subsequently, the admin creates a new group called Application as well, with some users in it, namely 'A' and 'B'.
The admin did not remove the user name 'Application' from the existing firewall policy due to oversight.
'A' entered the correct user name and password many times, but sees the error message that wrong credentials were entered.
Admin skimmed through the existing firewall policy again and thought that the correct group 'Application' was used when in fact the user name 'Application' was used.
However, on deeper examination, Admin realized that the correct group 'Application' has not been correctly configured into the firewall policy.
On configuring the correct group 'Application' with 'A' and 'B' into the existing firewall policy. 'A' can authenticate successfully.
Admin removed the user named 'Application' to avoid future potential mix-up.

Sign up