Skip to main content
Syed_Mehmood_Ali
Syed_Mehmood_Ali
New Member
October 7, 2015
Question

FSSO 5.2

  • October 7, 2015
  • 2 replies
  • 6436 views
We are testing the FSSO on terminal using DC agent mode. We configured LDAP successfully on the fortigate 100D unit. We have installed FSSO v5.0x on the Domain Controller and TS Agent on the terminal servers, then we made a object for each terminal servers with its ip addresses. After that we made a policy for each terminal server using its IP address as a source address and in source users we import the users through LDAP who are actually login on that server. But when we did all of this and test the internet by login one of the id from LDAP on the terminal server Fortinet Authentication appeared while trying to open any webpage on that server. I dont know what I did wrong please someone point me to the right direction how I resolved my issue. Thanks in advance

    2 replies

    Syed_Mehmood_Ali
    Syed_Mehmood_AliAuthor
    New Member
    October 8, 2015

    One thing I want to add more is that, when I execute a command "diagnose debug authd fsso list" after login the workstation it is saying that "Total number of logons listed: 0". It means there is some communication issue between FSSO agent and firewall.

    Dipen
    Dipen
    New Member
    October 8, 2015

    Hi Syed

    What is your exact requirement ?

    While configuring Internet access policies what "UserGroups" have you associated with Policy. have you configured FSSO Groups or LDAP Groups.

    From your question it appears you have selected LDAP Groups; In that case even if you login to TS Clients with your domain credentials you will still be prompted for credentials.

    For transparent authentication please use FSSO Groups.

     

    You can track authentication in User Monitor :)

    Syed_Mehmood_Ali
    Syed_Mehmood_AliAuthor
    New Member
    October 8, 2015

    Dipen, when I use FSSO group in the policy as a source user, Internet is not working. When I use remote LDAP user as a source user its keep asking the credentials, this is my problem none of the option working for me. 

    Syed_Mehmood_Ali
    Syed_Mehmood_AliAuthor
    New Member
    October 12, 2015

    I have resolved my issue by setting up group filter correctly on FSSO Agent which was wrongly configured in the past. LDAP configuration is not required when you used FSSO agent based Sign-on.

    Terms & ConditionsAccessibility statement