Technical Tip: How to diagnose RADIUS authentication for administrators

Description

This article describes how to diagnose remote authentication for RADIUS administrators.

Scope

FortiMail.

Solution

The RADIUS configuration for administrator login is described in the following document:

Technical Tip: FortiMail remote wildcard domain admin 

Enable the following debug processes:
 

diagnose debug application auth set
diagnose debug application auth 255
diagnose debug application auth get
diagnose debug enable

Starting from v7.6.3 and above, use the following commands to enable debugging:

diagnose debug application authd level V
diagnose debug application authd 7
diagnose debug application authd enable
diagnose debug application authd display

To disable debug mode, execute the following command:

diagnose debug disable

Starting from v7.6.3 and above, use the following commands to disable the debugging:

diagnose debug application authd level 0
diagnose debug application authd disable

The debug output indicates the connection attributes and the response from the RADIUS server.

Examples:
For valid authentication, 2 – Access-Accept indicates that the authentication was successful and the user is authorized.

For failed authentication, 3 – Access-Reject indicates that the authentication failed (invalid credentials or policy violation).