Technical Tip: How to diagnose RADIUS authentication for administrators

The RADIUS configuration for administrator login is described in the following document:

Technical Tip: FortiMail remote wildcard domain admin 

Enable the following debug processes:

diagnose debug application authd set
diagnose debug application authd 255
diagnose debug application authd get
diagnose debug enable

Starting from v7.6.3 and above, use the following commands to enable debugging:

diagnose debug application authd level V

diagnose debug application authd 7

diagnose debug application authd enable

diagnose debug application authd display

To disable debug mode, execute the following command:

diagnose debug disable

Starting from v7.6.3 and above, use the following commands to disable the debugging:

diagnose debug application authd level 0

diagnose debug application authd disable

The debug output indicates the connection attributes and the response from the RADIUS server.

Examples:

For valid authentication, 2 – Access-Accept indicates that the authentication was successful and the user is authorized.

For failed authentication, 3 – Access-Reject indicates that the authentication failed (invalid credentials or policy violation).