Technical Tip: How to troubleshoot FortiSandbox LDAP authentication error Login test failed: 80090308: LdapErr: DSID-0C090549, comment: AcceptSecurityContext error, data 52e, v65f4

Description

This article describes how to troubleshoot FortiSandbox LDAP authentication error Login test failed: 80090308: LdapErr: DSID-0C090549, comment: AcceptSecurityContext error, data 52e, v65f4.

Scope

FortiSandbox.

Solution

Go to System Settings -> LDAP Servers -> Edit LDAP Server ->Test Login.

Connection status:

Login test failed: 80090308: LdapErr: DSID-0C090549, comment: AcceptSecurityContext error, data 52e, v65f4.

This error comes from the LDAP server itself, and something is not being accepted on the LDAP server even though the user credentials are correct.

LDAP Server bind request & response wireshark capture:

Using the full 'username@domain' format on the service account, referred to as the User Principal Name (UPN), during an LDAP authentication attempt resolves the 'invalid credentials' error by supplying a complete, unambiguous identifier.
This allows the service account FortiSandbox to query the LDAP successfully.

LDAP Server bind request & response wireshark capture: