Explorer

Question

FortiAuthenticator Gui Access

Forum|Forum|4 years ago
January 27, 2022
22 replies
17488 views

Hi,

I am unable to log in to the FAC via the GUI. Authentication is working however GUI access is not working cu. I can access FAC via CLI.

Farooq

FortiAuthenticator v5.5

Debbie_FTNT

Staff & Editor

Hey Farooq,

please ensure you have GUI access enabled on the interface.

You can do this via CLI:

#config system interface
#edit <interface>
#set allowaccess ssh https-gui

#end

--> the correct allowaccess setting varies depending on firmware version of your FortiAuthenticator; you can do 'set allowaccess ?' to see the available options; you will want 'https' or 'https-gui' for GUI access.

FHUSSAINAuthor

Explorer

Thank you. GUI access is enabled on the interface. I am getting following error.

Please enter correct credentials.

Nothing is wrong with credentails. I am using admin credentials.

Farooq

warshad

Staff

Hi Farooq,

Login to CLI and apply the following command.

# Diagnose web restart

This command will restart the FortiAuthenticator web services.

ZsiNor

Visitor III

Hi,

Still not working. 6.4.4. HTTP and HTTPS access is granted. Can log in via TELNET and SSH but GUI access keeps failing and redirecting back to the login page. Need something with the URI to bypass this.

http://x.x.x.x/login/?next=/ is the page your're getting if you enter the IP then log in and redirects you back to this.

A

Anonymous_User

Esteemed Contributor III

Can you attach your screenshot so i can get some idea on the issue ?

ZsiNor

Visitor III

https://drive.google.com/file/d/1fKsH1StWU7I9WgQ_ZDIwmx5xIBXhT_4U/view?usp=sharing

Give it some time until Google can recode the video. Screenshots won't do this. Also please note that I've restarted the web service on the FAC multiple times. Since HTTPS does work (HTTP doesn't as shown on the video), it's no prob for me after this.

shaker

New Member

I have the same problem, restarting the web service does not help, ssh and https-gui are enabled on the are enabled on the interface port, what else can help?

dbu

Staff

Hi @shaker ,

Are you trying to reach the GUI with HTTP or HTTPS ?

I see you have only configured HTTPS-GUI.

What is your firmware version ?

shaker

New Member

I haven’t tried http, it was written here for other purposes, FortiAuthenticator version 6.5.3

Norb

New Member

Log into the device's GUI via the same subnet (you can NAT if that's the only way). In the GUI navigate to system settings and check the allowed login subnets. By default the FAC on those versions don't allow you to log in if you're outside the subnet configured there. It's terrible especially for 3rd party supporters.

shaker

New Member

The problem is that authorization gives the error "Please enter correct credentials. Note that password is case-sensitive" at the same time the password passes through the console, trying from this subnet and directly

ndumaj

Staff

Hi shaker,
Are you using the same username that you access the CLI?

Are you using Admin user or a different administrator user?
BR

Norb

New Member

If all these are as you say... Are you sure you're not on the user auth portal instead of the management? Really you've already covered everything, most probably, I'd detach the device from the network (hopefuilly HA), grab my backup and just reset the box.

Melissa

Explorer II

hello, i have the same problem, could you resolve it?

ndumaj

Staff

Hi @Melissa
Do you have Hardware or VM FortiAuthenticator?

BR

MicheleLibraro

Explorer

We have same issue in similar scenario: 2VM with FortiAuthenticator in HA

FACVM v6.5.3-build1355,230719 (GA)

The primary unit management GUI crashes periodically, CLI console is operative.

"diagnose web restart" command is useless.

We were told to upgrade memory but now we have 8GB and when the machine fails "get hardware memory" shows 4 to 6GB free/available.

Moreover when the crash happens also fortitoken push authentication is unavailable.

Only rebooting the primary unit solve the problem momentarily; then the cycle repeats in 3 days.

We collected more than 1GBs of logs from debug hoping that TAC could find the root cause.

MicheleLibraro

Explorer

We had to issue "diagnose authentication restart", to not reboot the entire machine - although it's pretty the same considering its nature - by now FortiTAC advise to upgr to 6.6.2, because it seems that our rel is affected by memory leak problems.