Skip to main content
Fabio
Explorer III
March 8, 2024
Solved

FortiAuthenticator user disable before approve process

  • March 8, 2024
  • 8 replies
  • 3384 views

Hello, 

 I have a problem with disabling usernames that register on the Captive Portal create on my FortiAuthenticator.
After the registration but before approval by an Administrator, if the user tries to authenticate with the credentials they registered with, the FortiAuth disables the user and the link that comes (with email) to Administrator or sponsor generates an error and cannot be approved.
I have to go into management and reenable the user manualy.
Any ideas to avoid this?

 

Thank's

Best answer by Fabio

Fortinet support acknowledged it was a Bug and that it will be fixed in the next releas of FAC 6.6.1 GA. 

 

8 replies

Fabio
FabioAuthor
Explorer III
March 8, 2024

Screenshot 2024-03-08 alle 08.59.44.png

ebilcari
Staff
Staff
March 8, 2024

I'm not sure but this may fall to the Lockouts policy, can you check what value is configured here:

lockout.PNG

Emirjon
Fabio
FabioAuthor
Explorer III
March 8, 2024

yes i have lockout policy but they have attempt 10 times

 

Screenshot 2024-03-08 alle 16.12.59.png

I don't think this is the problem because the lockeout timeout then after 60 seconds ends but in my case it remains disabled.

Fabio
FabioAuthor
Explorer III
March 12, 2024

 i open a TAC

Fabio
FabioAuthor
Explorer III
March 12, 2024

I tried to disable User Lockout Policy and the issue was not happened again.

Here is the Captive Portal locked screen when the user try to connect before the approval.

I hoper to find a bug that will be recovered with new release.

Captive Portal Locked.jpg

ebilcari
Staff
Staff
March 12, 2024

Thanks for sharing your findings. Since the behavior is easy reproducible I think the engineering team will identify it and offer a solution in the next release. You have to follow up with the TAC support team.

Emirjon
Fabio
FabioAuthorAnswer
Explorer III
April 10, 2024

Fortinet support acknowledged it was a Bug and that it will be fixed in the next releas of FAC 6.6.1 GA. 

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!