Skip to main content
M-Polo-n
M-Polo-n
Visitor III
August 26, 2022
Solved

FSSO Agent on Windows AD not connect to dc.

  • August 26, 2022
  • 1 reply
  • 8000 views

Good morning,

I'm having trouble connecting to the Fortinet Single sign on agent on Domain Controller.

 

The firewall fails to connect correctly with the SSOA on the domain controller.

 

On DC the firewall (windows) it's off, port 8000/8002 are ok.

Collector Agent status on DC is RUNNING,

but when I click on the "show log on user" the system respond: "Time out when getting logon user list"

 

Password require from Fortigate it's ok.

Ldap server on port 389 it's ok.

 

When click on "Show Monitored DCs" ---> Time out when getting DC agent status.

 

The log application error:

 

ldaplib::ldap_connect failed to connect to DC:3268 with error code 0x51.

 

can anyone help me ?

 

Tnx

 

 

 

 

 

 

 

Best answer by M-Polo-n

I solved by reinstalling the collector on the domain controller.

 

probably the collector was corrupted during a maintenance reboot of the DC

1 reply

M-Polo-n
M-Polo-nAuthorAnswer
Visitor III
August 26, 2022

I solved by reinstalling the collector on the domain controller.

 

probably the collector was corrupted during a maintenance reboot of the DC

Markus_M
Staff & Editor
Markus_M
Staff & Editor
August 26, 2022

Hello Marco,

 

no issue or fixed issue is good. Just to add on this:

 

ldaplib::ldap_connect failed to connect to DC:3268 with error code 0x51.

This is an LDAP response code. Could really be a library problem or there was some underlying other issue that has fixed itself.

The Collector Agent uses Windows libraries to do the LDAP lookup and that as failed.

 

As per:

https://docs.microsoft.com/en-us/answers/questions/823917/an-active-directory-error-0x51-occurred34-error-wh.html

 

[Time_Point_1] [2] [ERROR] An Active Directory error 0x51 occurred when trying to check the suitability of server 'domain_controller_name'. Error: 'Active directory response: The LDAP server is unavailable.'

[Time_Point_2] [2] [ERROR] The LDAP server is unavailable.

 

Best regards

 

Markus

    Terms & ConditionsAccessibility statement